Security News > 2019 > September > WordPress XSS Bug Allows Drive-By Code Execution

WordPress XSS Bug Allows Drive-By Code Execution

2019-09-13 20:52

Sites that use the Gutenberg (found in WordPress 5.0 to 5.2.2) are open to complete takeover.

News URL

https://threatpost.com/wordpress-xss-drive-by-code-execution/148324/

#codeexecution #wordpress #XSS

Related news

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks (source)

Related vendor

VENDOR	LAST 12M	#/PRODUCTS	LOW	MEDIUM	HIGH	CRITICAL	TOTAL VULNS
Wordpress		7	2	95	44	18	159

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.