WordPress Multiple Vulnerabilities

Last Update Date: 5 Feb 2016 09:28 Release Date: 5 Feb 2016 2717 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

Two vulnerabilities were identified in WordPress. A remote user can conduct server-side request forgery attacks. A remote user can redirect the target user's browser to an arbitrary site.

Impact

Cross-Site Scripting

System / Technologies affected

Versions prior to 4.4.2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 4.4.2.

Vulnerability Identifier

CVE-2016-2221
CVE-2016-2222

Source

SecurityTracker