To plugin page

Fixed

WordPress <= 5.7.4 - Plugin Confusion vulnerability

8.1

CVSS 3.1 score High severity

Monitoring Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

WordPress

Type

WordPress Core

Vulnerable versions

<= 5.7.4

Fixed in

5.8

PSID

14c396429b99

CVE ID

CVE-2021-44223

Classification

Other Vulnerability Type

OWASP Top 10

N/A

Required privilege

Credits

Kamil Vavra

Publicly disclosed

2021-11-25

Details

Plugin Confusion vulnerability discovered by Kamil Vavra in WordPress (versions <= 5.7.4).

Solution

Update WordPress to the latest available version (at least 5.8 or other patched version).

References

CVE-2021-44223 Vulnerability details Changelog

Other known vulnerabilities for WordPress

Stored CrossSite Scripting (XSS) vulnerability

<= 5.9.1

5.4

11.03.2022

SQL Injection (SQLi) vulnerability

<= 5.8.2

06.01.2022

SQL Injection (SQLi) vulnerability

<= 5.8.2

7.4

06.01.2022

Stored CrossSite Scripting (XSS) vulnerability

<= 5.8.2

7.6

06.01.2022

Authenticated Object Injection in Multisites

<= 5.8.2

6.6

06.01.2022

Submit vulnerabilities and become a verified Alliance member

Learn more

WordPress <= 5.7.4 - Plugin Confusion vulnerability

Details

Solution

References

Other known vulnerabilities for WordPress

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

WordPress <= 5.7.4 - Plugin Confusion vulnerability

Details

Solution

References

Other known vulnerabilities for WordPress

Submit vulnerabilities and become a verified Alliance member

All solutions

WordPress security

Patchstack

Social

All solutions

WordPress Security

Patchstack

Social

© 2022 Patchstack

Let us know if we have missed a vulnerability reported elsewhere

Thank you for contributing!