Detections
Analytics

WordPress 7.0.0 < 7.0.5 / 6.9.0 < 6.9.8 / 6.8.0 < 6.8.9 / 6.7.0 < 6.7.8 / 6.6.0 < 6.6.8 / 6.5.0 < 6.5.11 / 6.4.0 < 6.4.11 / 6.3.0 < 6.3.11 / 6.2.0 < 6.2.12 / 6.1.0 < 6.1.13 / 6.0.0 < 6.0.15 / 5.9.0 < 5.9.17 / 5.8.0 < 5.8.16 / 5.7.0 < 5.7.18 / 5.6.0 < 5.6.20 / 5.5.0 < 5.5.21 / 5.4.0 < 5.4.22 / 5.3.0 < 5.3.24 / 5.2.0 < 5.2.27 / 5.1.0 < 5.1.25 / 5.0.0 < 5.0.28 / 4.9.0 < 4.9.32 / 4.8.0 < 4.8.31

high Nessus Plugin ID 365979

Synopsis

A PHP application running on the remote web server is affected by one or more vulnerabilities.

Description

WordPress versions 7.0.0 < 7.0.5 / 6.9.0 < 6.9.8 / 6.8.0 < 6.8.9 / 6.7.0 < 6.7.8 / 6.6.0 < 6.6.8 / 6.5.0 < 6.5.11 / 6.4.0 < 6.4.11 / 6.3.0 < 6.3.11 / 6.2.0 < 6.2.12 / 6.1.0 < 6.1.13 / 6.0.0 < 6.0.15 / 5.9.0 < 5.9.17 / 5.8.0 < 5.8.16 / 5.7.0 < 5.7.18 / 5.6.0 < 5.6.20 / 5.5.0 < 5.5.21 / 5.4.0 < 5.4.22 / 5.3.0 < 5.3.24 / 5.2.0 < 5.2.27 / 5.1.0 < 5.1.25 / 5.0.0 < 5.0.28 / 4.9.0 < 4.9.32 / 4.8.0 < 4.8.31 are affected by one or more vulnerabilities

Solution

Upgrade to WordPress version 7.0.5, 6.9.8, 6.8.9, 6.7.8, 6.6.8, 6.5.11, 6.4.11, 6.3.11, 6.2.12, 6.1.13, 6.0.15, 5.9.17, 5.8.16, 5.7.18, 5.6.20, 5.5.21, 5.4.22, 5.3.24, 5.2.27, 5.1.25, 5.0.28, 4.9.32, 4.8.31 or later.

See Also

http://www.nessus.org/u?2eff27cf

Plugin Details

Severity: High

ID: 365979

File Name: wordpress_7_0_5.nasl

Version: 1.1

Type: Remote

Family: CGI abuses

Published: 10/14/2026

Updated: 10/14/2026

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Enable CGI Scanning: true

Vulnerability Information

CPE: cpe:/a:wordpress:wordpress

Required KB Items: installed_sw/WordPress, www/PHP, Settings/ParanoidReport

Exploit Ease: No known exploits are available

Patch Publication Date: 9/18/2026

Vulnerability Publication Date: 9/18/2026