vulnerability
Wordpress: CVE-2020-11029: Vulnerability in the stats() method of class-wp-object-cache.php can be exploited to execute cross-site scripting (XSS) attacks
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Apr 30, 2020 | Feb 6, 2024 | Nov 26, 2024 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Apr 30, 2020
Added
Feb 6, 2024
Modified
Nov 26, 2024
Description
In affected versions of WordPress, a vulnerability in the stats() method of class-wp-object-cache.php can be exploited to execute cross-site scripting (XSS) attacks. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).
Solution(s)
wordpress-upgrade-3_7_34wordpress-upgrade-3_8_34wordpress-upgrade-3_9_32wordpress-upgrade-4_0_31wordpress-upgrade-4_1_31wordpress-upgrade-4_2_28wordpress-upgrade-4_3_24wordpress-upgrade-4_4_23wordpress-upgrade-4_5_22wordpress-upgrade-4_6_19wordpress-upgrade-4_7_18wordpress-upgrade-4_8_14wordpress-upgrade-4_9_15wordpress-upgrade-5_0_10wordpress-upgrade-5_1_6wordpress-upgrade-5_2_7wordpress-upgrade-5_3_4wordpress-upgrade-5_4_2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.