Description

WordPress is prone to a clickjacking vulnerability. Successful exploits will allow an attacker to compromise the affected application or obtain sensitive information; other attacks are also possible. WordPress versions prior to 3.1.3 are vulnerable.

Remediation

Update to WordPress version 3.1.3 or latest

References

http://packetstormsecurity.org/files/view/105293/wordpress-clickjack.zip

https://core.trac.wordpress.org/ticket/12293

Related Vulnerabilities

Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-26185)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.19)

WordPress Plugin Meta Box-WordPress Custom Fields Framework Arbitrary File Upload (4.16.1)

Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-7913)

MediaWiki CVE-2022-28205 Vulnerability (CVE-2022-28205)

Severity

High

Classification

CVE-2011-3127 CWE-693 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update