Detections
Analytics
WordPress < 3.6.1 Multiple Vulnerabilities
high Nessus Plugin ID 69997
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple vulnerabilities.Description
According to its version number, the WordPress install hosted on the remote web server is affected by multiple vulnerabilities :- Unsafe PHP de-serialization could occur in limited situations and setups, which could lead to remote code execution. (CVE-2013-4338)
- Open redirect/insufficient input validation could allow attackers to redirect users to a malicious website.
(CVE-2013-4339)
- A user with an Author role, using a specially crafted request, can forge a post that appears to be posted by another user. (CVE-2013-4340)
- As a proactive measure to prevent cross-site scripting attacks, extensions .swf, .exe, .htm, and .html are filtered from file uploading. (CVE-2013-5738, CVE-2013-5739)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to WordPress 3.6.1 or later.See Also
https://wordpress.org/news/2013/09/wordpress-3-6-1/
https://codex.wordpress.org/Version_3.6.1
https://seclists.org/fulldisclosure/2013/Dec/174
http://www.nessus.org/u?24ef6be5
https://core.trac.wordpress.org/changeset/25321
https://core.trac.wordpress.org/changeset/25322
https://core.trac.wordpress.org/changeset/25323
Plugin Details
Severity: High
ID: 69997
File Name: wordpress_3_6_1.nasl
Version: 1.20
Type: remote
Family: CGI abuses
Published: 9/19/2013
Updated: 1/19/2021
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2013-4339
Vulnerability Information
CPE: cpe:/a:wordpress:wordpress
Required KB Items: installed_sw/WordPress, www/PHP, Settings/ParanoidReport
Exploit Available: true
Exploit Ease: No exploit is required
Patch Publication Date: 9/11/2013
Vulnerability Publication Date: 9/10/2013
Reference Information
CVE: CVE-2013-4338, CVE-2013-4339, CVE-2013-4340, CVE-2013-5738, CVE-2013-5739