Exploitation Level: Medium: requires some level of social engineering
DREAD Score: 6.8
Vulnerability: Reflected XSS
Patched Version: 5.5.2
WordPress released version 5.5.2 yesterday, which fixed a reflected XSS vulnerability we reported earlier this year. The root cause of this issue is a bug in the way WordPress determines a user’s current page, and which may cause a few other problems as well.
Are You Affected?
This vulnerability is exploitable on every WordPress site and user account. For the exploit to be successful, the attacker must trick an unsuspecting user into clicking on a malicious…
More Info
