WordPress Vulnerabilities

WordPress <= 4.2.3 - Timing Side Channel Attack

Affects WordPress

4.2.2
Fixed in WordPress 4.2.4
4.2.3
Fixed in WordPress 4.2.4
4.2.1
Fixed in WordPress 4.2.4
4.2
Fixed in WordPress 4.2.4
4.1.6
Fixed in WordPress 4.1.7
4.1.5
Fixed in WordPress 4.1.7
4.1.4
Fixed in WordPress 4.1.7
4.1.3
Fixed in WordPress 4.1.7
4.1.2
Fixed in WordPress 4.1.7
4.1.1
Fixed in WordPress 4.1.7
4.1
Fixed in WordPress 4.1.7
4.0.6
Fixed in WordPress 4.0.7
4.0.5
Fixed in WordPress 4.0.7
4.0.4
Fixed in WordPress 4.0.7
4.0.3
Fixed in WordPress 4.0.7
4.0.2
Fixed in WordPress 4.0.7
4.0.1
Fixed in WordPress 4.0.7
4.0
Fixed in WordPress 4.0.7
3.9.7
Fixed in WordPress 3.9.8
3.9.6
Fixed in WordPress 3.9.8
3.9.5
Fixed in WordPress 3.9.8
3.9.4
Fixed in WordPress 3.9.8
3.9.3
Fixed in WordPress 3.9.8
3.9.2
Fixed in WordPress 3.9.8
3.9.1
Fixed in WordPress 3.9.8
3.9
Fixed in WordPress 3.9.8
3.8.9
Fixed in WordPress 3.8.10
3.8.8
Fixed in WordPress 3.8.10
3.8.7
Fixed in WordPress 3.8.10
3.8.6
Fixed in WordPress 3.8.10
3.8.5
Fixed in WordPress 3.8.10
3.8.4
Fixed in WordPress 3.8.10
3.8.3
Fixed in WordPress 3.8.10
3.8.2
Fixed in WordPress 3.8.10
3.8.1
Fixed in WordPress 3.8.10
3.8
Fixed in WordPress 3.8.10
3.7.9
Fixed in WordPress 3.7.10
3.7.8
Fixed in WordPress 3.7.10
3.7.7
Fixed in WordPress 3.7.10
3.7.6
Fixed in WordPress 3.7.10
3.7.5
Fixed in WordPress 3.7.10
3.7.4
Fixed in WordPress 3.7.10
3.7.3
Fixed in WordPress 3.7.10
3.7.2
Fixed in WordPress 3.7.10
3.7.1
Fixed in WordPress 3.7.10
3.7
Fixed in WordPress 3.7.10

References

CVE
CVE-2015-5730
URL
https://core.trac.wordpress.org/changeset/33536

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
3c4fe98d-04dd-4217-945d-11e06a173916

Timeline

Publicly Published
2015-08-05 (about 8 years ago)
Added
2015-08-05 (about 8 years ago)
Last Updated
2019-10-22 (about 4 years ago)

Other

Published
Title
Published
2023-05-30
Title
CRM Perks Forms < 1.1.2 - Admin+ Stored Cross-Site Scripting
Published
2014-08-01
Title
Modular 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Published
2024-04-11
Title
ProfilePress < 4.15.5 - Contributor+ Stored Cross-Site Scripting
Published
2014-08-01
Title
WordPress <= 2.8.5 - Unrestricted File Upload Arbitrary PHP Code Execution
Published
2014-08-01
Title
Lazyest Gallery 0.10.4.3 - Multiple File/Directory Insecure Permissions Local Content Manipulation