Security News > 2019 > September > WordPress XSS Bug Allows Drive-By Code Execution

WordPress XSS Bug Allows Drive-By Code Execution

2019-09-13 20:52

Sites that use the Gutenberg (found in WordPress 5.0 to 5.2.2) are open to complete takeover.

News URL

https://threatpost.com/wordpress-xss-drive-by-code-execution/148324/

#codeexecution #wordpress #XSS

Related news

Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution (source)

Related vendor

VENDOR	LAST 12M	#/PRODUCTS	LOW	MEDIUM	HIGH	CRITICAL	TOTAL VULNS
Wordpress		49	36	409	104	29	578

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.