WordPress Releases Security Update

Scheduled security update fixes 3 vulnerabilities

Threat ID:: CC-4061
Threat Severity:: Information only
Published:: 18 March 2022 3:56 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Scheduled security update fixes 3 vulnerabilities

Affected platforms

The following platforms are known to be affected:

Versions: all prior to 5.9.2

WordPress Core

Threat details

Introduction

WordPress has released a security update to address three vulnerabilities concerning stored cross site scripting (XSS) and Prototype Pollution. An attacker could exploit these vulnerabilities to take control of an affected website.

Remediation advice

Affected organisations are encouraged to review the WordPress Security Release and update to 5.9.2.

Definitive source of threat updates

https://wordpress.org/news/2022/03/wordpress-5-9-2-security-maintenance-release/

CVE Vulnerabilities

Status Published

CVE-2021-20083

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object 2.2.3 allows a malicious user to inject properties into Object.prototype.

Last edited: 18 March 2022 3:56 pm