Detections
Analytics
FreeBSD : wordpress -- multiple issues (cee3d12f-bf41-11e7-bced-00e04c1ea73d)
high Nessus Plugin ID 104348
Language:
Synopsis
The remote FreeBSD host is missing a security-related update.Description
wordpress developers reports :WordPress versions 4.8.2 and earlier are affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL injection (SQLi). WordPress core is not directly vulnerable to this issue, but we've added hardening to prevent plugins and themes from accidentally causing a vulnerability.
Solution
Update the affected package.See Also
https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/
Plugin Details
Severity: High
ID: 104348
File Name: freebsd_pkg_cee3d12fbf4111e7bced00e04c1ea73d.nasl
Version: 3.3
Type: local
Family: FreeBSD Local Security Checks
Published: 11/2/2017
Updated: 1/4/2021
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:wordpress
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 11/1/2017
Vulnerability Publication Date: 10/31/2017