Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "3.7.40"
},
{
"introduced": "3.8"
},
{
"fixed": "3.8.40"
},
{
"introduced": "3.9"
},
{
"fixed": "3.9.39"
},
{
"introduced": "4.0"
},
{
"fixed": "4.0.37"
},
{
"introduced": "4.1"
},
{
"fixed": "4.1.37"
},
{
"introduced": "4.2"
},
{
"fixed": "4.2.34"
},
{
"introduced": "4.3"
},
{
"fixed": "4.3.30"
},
{
"introduced": "4.4"
},
{
"fixed": "4.4.29"
},
{
"introduced": "4.5"
},
{
"fixed": "4.5.28"
},
{
"introduced": "4.6"
},
{
"fixed": "4.6.25"
},
{
"introduced": "4.7"
},
{
"fixed": "4.7.25"
},
{
"introduced": "4.8"
},
{
"fixed": "4.8.21"
},
{
"introduced": "4.9"
},
{
"fixed": "4.9.22"
},
{
"introduced": "5.0"
},
{
"fixed": "5.0.18"
},
{
"introduced": "5.1"
},
{
"fixed": "5.1.15"
},
{
"introduced": "5.2"
},
{
"fixed": "5.2.17"
},
{
"introduced": "5.3"
},
{
"fixed": "5.3.14"
},
{
"introduced": "5.4"
},
{
"fixed": "5.4.12"
},
{
"introduced": "5.5"
},
{
"fixed": "5.5.11"
},
{
"introduced": "5.6"
},
{
"fixed": "5.6.10"
},
{
"introduced": "5.7"
},
{
"fixed": "5.7.8"
},
{
"introduced": "5.8"
},
{
"fixed": "5.8.6"
},
{
"introduced": "5.9"
},
{
"fixed": "5.9.5"
},
{
"introduced": "6.0"
},
{
"fixed": "6.0.3"
}
]
}