Description

WordPress is prone to multiple vulnerabilities, including server-side request forgery and open redirect vulnerabilities. Exploiting these issues could allow an attacker to make the vulnerable server perform port scanning of hosts in internal or external networks or to redirect users to arbitrary web sites and conduct phishing attacks; other attacks are also possible. WordPress versions ranging from 4.3 and up to (and including) 4.3.2 are vulnerable.

Remediation

Update to WordPress version 4.3.3 or latest

References

https://hackerone.com/reports/110801

https://wordpress.org/news/2016/02/wordpress-4-4-2-security-and-maintenance-release/

http://www.openwall.com/lists/oss-security/2016/02/04/6

Related Vulnerabilities

WordPress Plugin WP-AutoYoutube 'index.php' Script SQL Injection (0.1)

Internet Information Services Permissions, Privileges, and Access Controls Vulnerability (CVE-1999-1011)

WordPress MU 'wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities (1.0 - 2.5.1)

LimeSurvey Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-1000658)

WordPress Plugin Custom Post Type UI Cross-Site Scripting (1.1.1)

Severity

High

Classification

CVE-2016-2221 CVE-2016-2222 CWE-601 CWE-918 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update