根据其自我报告的版本号，检测到的 WordPress 应用程序受到多个漏洞的影响：

 - class-wp-press-this.php 脚本中存在一个信息泄露漏洞，这是未能正确限制分配分类术语的用户界面所致。经身份验证的远程攻击者可利用此漏洞泄露敏感信息。(CVE-2017-5610)

 - class-wp-query.php 脚本中存在一个 SQL 注入 (SQLi) 漏洞，这是无法审查帖子类型名称的输入所致。未经身份验证的远程攻击者可利用此问题，在后端数据库中注入或操纵 SQL 查询，进而导致泄露或操纵任意数据。(CVE-2017-5611)

 - 脚本中存在一个跨站脚本 (XSS) 漏洞， class-wp-posts-list-table.php 这是未正确验证帖子列表表格的输入所致。未经身份验证的远程攻击者可利用此问题，通过特别构建的请求在用户浏览器会话中执行任意脚本代码。(CVE-2017-5612)

 - REST API 中存在一个特权提升漏洞，这是在编辑或删除博客帖子时，无法正确审查用户提供的“id”参数输入所致。未经身份验证的远程攻击者可利用此问题，执行任意 PHP 代码、在博客帖子中插入内容、修改博客帖子属性，或删除博客帖子。(CVE-2017-1001000)

请注意，扫描程序并未测试这些问题，而是仅依据应用程序自我报告的版本号进行判断。

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities :

 - An information disclosure vulnerability exists in the class-wp-press-this.php script due to a failure to properly restrict the user interface for assigning taxonomy terms. An authenticated, remote attacker can exploit this to disclose sensitive information. (CVE-2017-5610)

 - A SQL injection (SQLi) vulnerability exists in the class-wp-query.php script due to a failure to sanitize input to post type names. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the disclosure or manipulation of arbitrary data. (CVE-2017-5611)

 - A cross-site scripting (XSS) vulnerability exists in the class-wp-posts-list-table.php script due to improper validation of input to the posts list table. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user's browser session. (CVE-2017-5612)

 - A privilege escalation vulnerability exists in the REST API due to a failure to properly sanitize user-supplied input to the 'id' parameter when editing or deleting blog posts. An unauthenticated, remote attacker can exploit this issue to run arbitrary PHP code, inject content into blog posts, modify blog post attributes, or delete blog posts. (CVE-2017-1001000)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

在 web 部落格工具 wordpress 中發現數個弱點。Common Vulnerabilities and Exposures 專案發現下列問題。CVE-2017-5488 WordPress 4.7.1 之前版本的 wp-admin/update-core.php 中有多個跨網站指令碼 (XSS) 弱點，遠端攻擊者可透過外掛程式的名稱或版本標頭，藉此插入任意 web 指令碼或 HTML。CVE-2017-5489 WordPress 4.7.1 之前版本中存在跨網站要求偽造 (CSRF) 弱點，遠端攻擊者可透過 Flash 檔案上傳的相關向量，藉此劫持不明受害者的驗證。CVE-2017-5490 在 WordPress 4.7.1 之前的版本中，wp-includes/class-wp-theme.php 的 theme-name 後援功能存在一個跨網站指令碼 (XSS) 弱點，遠端攻擊者可透過有關 wp-admin/includes/class-theme-installer-skin.php 主題的特製目錄名稱，藉此插入任意 web 指令碼或 HTML。CVE-2017-5491 WordPress 4.7.1 之前的版本中的 wp-mail.php 讓遠端攻擊者可透過名為 mail.example.com 的偽造郵件伺服器，繞過預定的發文限制。CVE-2017-5492 WordPress 4.7.1 之前版本中的小工具編輯存取工具模式功能存在一個跨網站要求偽造 (CSRF) 弱點，遠端攻擊者可針對執行有關 wp-admin/includes/class-wp-screen.php 和 wp-admin/widgets.php 小工具存取動作的要求，藉此劫持該要求的不明受害者驗證。CVE-2017-5493 在 WordPress 4.7.1 之前的版本中，多網站 WordPress API 的 wp-includes/ms-functions.php 未正確選擇金鑰的隨機號碼，遠端攻擊者可透過特製的網站註冊或使用者註冊，輕易地繞過預定的存取限制。CVE-2017-5610 在 WordPress 4.7.2 之前的版本中，Press This 的 wp-admin/includes/class-wp-press-this.php 未正確限制分類法指派使用者介面的能見度，遠端攻擊者可透過讀取術語繞過預定的存取限制。CVE-2017-5611 在 WordPress 4.7.2 之前的版本中，WP_Query 的 wp-includes/class-wp-query.php 存在一個 SQL 插入弱點，遠端攻擊者可透過利用出現不當處理特製發文類型名稱的受影響外掛程式或主題，藉此執行任意 SQL 命令。CVE-2017-5612 在 WordPress 4.7.2 之前的版本中，發文清單表格的 wp-admin/includes/class-wp-posts-list-table.php 存在一個跨網站指令碼 (XSS) 弱點，遠端攻擊者可透過特製文章摘要，藉此插入任意 web 指令碼或 HTML。針對 Debian 7「Wheezy」，這些問題已在 3.6.1+dfsg-1~deb7u13 版本中修正。建議您升級 wordpress 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

在 web 部落格工具 wordpress 中發現數個弱點。遠端攻擊者可藉此劫持受害者的認證、存取敏感資訊、執行任意命令、繞過讀取和發文限制，或掛接拒絕服務攻擊。

Versions of WordPress prior to 4.7.2 are affected by multiple vulnerabilities :

 - A flaw exists in the 'wp-admin/includes/class-wp-press-this.php' script that is triggered as the user interface for assigning taxonomy terms is exposed to users, who do not have permission to use it.  This may allow an authenticated, remote attacker to gain unauthorized acces to sensitive information.
 - A flaw exists that may allow carrying out an SQL injection attack.  The issue is due to the 'wp-includes/class-wp-query.php' script not properly sanitizing input to post type names before using it in SQL queries.  This may potentially allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data. 
 - A flaw exists that allows a cross-site scripting (XSS) attack.  This flaw exists because the 'wp-admin/includes/class-wp-posts-list-table.php' script does not properly validated input to posts list table excerpts before returning it to users.  This may allow a remote attacker to create a specially crafted request that will execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - A flaw exists in the '/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php' script that is due to a failure to securely perform permission checks.  This may allow a remote attacker to change the content of arbitrary posts or pages.

ID	名稱	產品	系列	已發布	已更新	嚴重性
98264	WordPress 4.4.x < 4.4.7 多个漏洞	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98267	WordPress 4.1.x < 4.1.15 多个漏洞	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98269	WordPress 3.9.x < 3.9.16 多个漏洞	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98270	WordPress 3.8.x < 3.8.18 多个漏洞	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98261	WordPress 4.7.x < 4.7.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98262	WordPress 4.6.x < 4.6.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98264	WordPress 4.4.x < 4.4.7 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98267	WordPress 4.1.x < 4.1.15 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98269	WordPress 3.9.x < 3.9.16 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
98270	WordPress 3.8.x < 3.8.18 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	2018/11/5	2023/3/14	critical
96930	Debian DLA-813-1：wordpress 安全性更新	Nessus	Debian Local Security Checks	2017/2/2	2021/1/11	critical
96932	Debian DSA-3779-1：wordpress - 安全性更新	Nessus	Debian Local Security Checks	2017/2/2	2021/1/11	critical
9950	WordPress < 4.7.2 Multiple Vulnerabilities	Nessus Network Monitor	CGI	2017/2/9	2019/3/6	medium

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium