Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

 HTTP:WORD-PRESS-CONTENT-RCE

Severity

 Major

Recommended

 Yes

Recommended Action

 Drop

Category

 HTTP

Keywords

 WordPress Comment Content Filter Remote Code Execution

Release Date

 2019/06/03

Update Number

 3177

Supported Platforms

 idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: WordPress Comment Content Filter Remote Code Execution


This signature detects attempts to exploit a known vulnerability against WordPress Comment Content Filter. A successful attack can lead to arbitrary code execution.

Extended Description

WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated users in a default configuration. This occurs because CSRF protection is mishandled, and because Search Engine Optimization of A elements is performed incorrectly, leading to XSS. The XSS results in administrative access, which allows arbitrary changes to .php files. This is related to wp-admin/includes/ajax-actions.php and wp-includes/comment.php.

Affected Products

  • Wordpress wordpress -
  • Wordpress wordpress 0.71
  • Wordpress wordpress 0.711
  • Wordpress wordpress 0.72
  • Wordpress wordpress 1.0
  • Wordpress wordpress 1.0.1
  • Wordpress wordpress 1.0.2
  • Wordpress wordpress 1.1.1
  • Wordpress wordpress 1.2
  • Wordpress wordpress 1.2.1
  • Wordpress wordpress 1.2.2
  • Wordpress wordpress 1.2.3
  • Wordpress wordpress 1.2.4
  • Wordpress wordpress 1.2.5
  • Wordpress wordpress 1.3
  • Wordpress wordpress 1.3.2
  • Wordpress wordpress 1.3.3
  • Wordpress wordpress 1.5
  • Wordpress wordpress 1.5.1
  • Wordpress wordpress 1.5.1.1
  • Wordpress wordpress 1.5.1.2
  • Wordpress wordpress 1.5.1.3
  • Wordpress wordpress 1.5.2
  • Wordpress wordpress 1.6.2
  • Wordpress wordpress 2.0
  • Wordpress wordpress 2.0.1
  • Wordpress wordpress 2.0.10
  • Wordpress wordpress 2.0.11
  • Wordpress wordpress 2.0.2
  • Wordpress wordpress 2.0.3
  • Wordpress wordpress 2.0.4
  • Wordpress wordpress 2.0.5
  • Wordpress wordpress 2.0.6
  • Wordpress wordpress 2.0.7
  • Wordpress wordpress 2.0.8
  • Wordpress wordpress 2.0.9
  • Wordpress wordpress 2.1
  • Wordpress wordpress 2.1.1
  • Wordpress wordpress 2.1.2
  • Wordpress wordpress 2.1.3
  • Wordpress wordpress 2.2
  • Wordpress wordpress 2.2.1
  • Wordpress wordpress 2.2.2
  • Wordpress wordpress 2.2.3
  • Wordpress wordpress 2.3
  • Wordpress wordpress 2.3.1
  • Wordpress wordpress 2.3.2
  • Wordpress wordpress 2.3.3
  • Wordpress wordpress 2.5
  • Wordpress wordpress 2.5.1
  • Wordpress wordpress 2.6
  • Wordpress wordpress 2.6.1
  • Wordpress wordpress 2.6.2
  • Wordpress wordpress 2.6.3
  • Wordpress wordpress 2.6.5
  • Wordpress wordpress 2.7
  • Wordpress wordpress 2.7.1
  • Wordpress wordpress 2.8
  • Wordpress wordpress 2.8.1
  • Wordpress wordpress 2.8.2
  • Wordpress wordpress 2.8.3
  • Wordpress wordpress 2.8.4
  • Wordpress wordpress 2.8.5
  • Wordpress wordpress 2.8.5.1
  • Wordpress wordpress 2.8.5.2
  • Wordpress wordpress 2.8.6
  • Wordpress wordpress 2.9
  • Wordpress wordpress 2.9.1
  • Wordpress wordpress 2.9.1.1
  • Wordpress wordpress 2.9.2
  • Wordpress wordpress 3.0
  • Wordpress wordpress 3.0.1
  • Wordpress wordpress 3.0.2
  • Wordpress wordpress 3.0.3
  • Wordpress wordpress 3.0.4
  • Wordpress wordpress 3.0.5
  • Wordpress wordpress 3.0.6
  • Wordpress wordpress 3.1
  • Wordpress wordpress 3.1.1
  • Wordpress wordpress 3.1.2
  • Wordpress wordpress 3.1.3
  • Wordpress wordpress 3.1.4
  • Wordpress wordpress 3.2
  • Wordpress wordpress 3.2.1
  • Wordpress wordpress 3.3
  • Wordpress wordpress 3.3.1
  • Wordpress wordpress 3.3.2
  • Wordpress wordpress 3.3.3
  • Wordpress wordpress 3.4
  • Wordpress wordpress 3.4.0
  • Wordpress wordpress 3.4.1
  • Wordpress wordpress 3.4.2
  • Wordpress wordpress 3.5
  • Wordpress wordpress 3.5.0
  • Wordpress wordpress 3.5.1
  • Wordpress wordpress 3.5.2
  • Wordpress wordpress 3.6
  • Wordpress wordpress 3.6.1
  • Wordpress wordpress 3.7
  • Wordpress wordpress 3.7.1
  • Wordpress wordpress 3.7.10
  • Wordpress wordpress 3.7.11
  • Wordpress wordpress 3.7.12
  • Wordpress wordpress 3.7.13
  • Wordpress wordpress 3.7.14
  • Wordpress wordpress 3.7.15
  • Wordpress wordpress 3.7.16
  • Wordpress wordpress 3.7.17
  • Wordpress wordpress 3.7.18
  • Wordpress wordpress 3.7.19
  • Wordpress wordpress 3.7.2
  • Wordpress wordpress 3.7.20
  • Wordpress wordpress 3.7.21
  • Wordpress wordpress 3.7.22
  • Wordpress wordpress 3.7.23
  • Wordpress wordpress 3.7.24
  • Wordpress wordpress 3.7.25
  • Wordpress wordpress 3.7.26
  • Wordpress wordpress 3.7.27
  • Wordpress wordpress 3.7.28
  • Wordpress wordpress 3.7.29
  • Wordpress wordpress 3.7.3
  • Wordpress wordpress 3.7.30
  • Wordpress wordpress 3.7.31
  • Wordpress wordpress 3.7.32
  • Wordpress wordpress 3.7.33
  • Wordpress wordpress 3.7.34
  • Wordpress wordpress 3.7.4
  • Wordpress wordpress 3.7.5
  • Wordpress wordpress 3.7.6
  • Wordpress wordpress 3.7.7
  • Wordpress wordpress 3.7.8
  • Wordpress wordpress 3.7.9
  • Wordpress wordpress 3.8
  • Wordpress wordpress 3.8.1
  • Wordpress wordpress 3.8.10
  • Wordpress wordpress 3.8.11
  • Wordpress wordpress 3.8.12
  • Wordpress wordpress 3.8.13
  • Wordpress wordpress 3.8.14
  • Wordpress wordpress 3.8.15
  • Wordpress wordpress 3.8.16
  • Wordpress wordpress 3.8.17
  • Wordpress wordpress 3.8.18
  • Wordpress wordpress 3.8.19
  • Wordpress wordpress 3.8.2
  • Wordpress wordpress 3.8.20
  • Wordpress wordpress 3.8.21
  • Wordpress wordpress 3.8.22
  • Wordpress wordpress 3.8.23
  • Wordpress wordpress 3.8.24
  • Wordpress wordpress 3.8.25
  • Wordpress wordpress 3.8.26
  • Wordpress wordpress 3.8.27
  • Wordpress wordpress 3.8.28
  • Wordpress wordpress 3.8.29
  • Wordpress wordpress 3.8.3
  • Wordpress wordpress 3.8.30
  • Wordpress wordpress 3.8.31
  • Wordpress wordpress 3.8.32
  • Wordpress wordpress 3.8.33
  • Wordpress wordpress 3.8.34
  • Wordpress wordpress 3.8.4
  • Wordpress wordpress 3.8.5
  • Wordpress wordpress 3.8.6
  • Wordpress wordpress 3.8.7
  • Wordpress wordpress 3.8.8
  • Wordpress wordpress 3.8.9
  • Wordpress wordpress 3.9
  • Wordpress wordpress 3.9.0
  • Wordpress wordpress 3.9.1
  • Wordpress wordpress 3.9.10
  • Wordpress wordpress 3.9.11
  • Wordpress wordpress 3.9.12
  • Wordpress wordpress 3.9.13
  • Wordpress wordpress 3.9.14
  • Wordpress wordpress 3.9.15
  • Wordpress wordpress 3.9.16
  • Wordpress wordpress 3.9.17
  • Wordpress wordpress 3.9.18
  • Wordpress wordpress 3.9.19
  • Wordpress wordpress 3.9.2
  • Wordpress wordpress 3.9.20
  • Wordpress wordpress 3.9.21
  • Wordpress wordpress 3.9.22
  • Wordpress wordpress 3.9.23
  • Wordpress wordpress 3.9.24
  • Wordpress wordpress 3.9.25
  • Wordpress wordpress 3.9.26
  • Wordpress wordpress 3.9.27
  • Wordpress wordpress 3.9.28
  • Wordpress wordpress 3.9.29
  • Wordpress wordpress 3.9.3
  • Wordpress wordpress 3.9.30
  • Wordpress wordpress 3.9.31
  • Wordpress wordpress 3.9.32
  • Wordpress wordpress 3.9.4
  • Wordpress wordpress 3.9.5
  • Wordpress wordpress 3.9.6
  • Wordpress wordpress 3.9.7
  • Wordpress wordpress 3.9.8
  • Wordpress wordpress 3.9.9
  • Wordpress wordpress 4.0
  • Wordpress wordpress 4.0.1
  • Wordpress wordpress 4.0.10
  • Wordpress wordpress 4.0.11
  • Wordpress wordpress 4.0.12
  • Wordpress wordpress 4.0.13
  • Wordpress wordpress 4.0.14
  • Wordpress wordpress 4.0.15
  • Wordpress wordpress 4.0.16
  • Wordpress wordpress 4.0.17
  • Wordpress wordpress 4.0.18
  • Wordpress wordpress 4.0.19
  • Wordpress wordpress 4.0.2
  • Wordpress wordpress 4.0.20
  • Wordpress wordpress 4.0.21
  • Wordpress wordpress 4.0.22
  • Wordpress wordpress 4.0.23
  • Wordpress wordpress 4.0.24
  • Wordpress wordpress 4.0.25
  • Wordpress wordpress 4.0.26
  • Wordpress wordpress 4.0.27
  • Wordpress wordpress 4.0.28
  • Wordpress wordpress 4.0.29
  • Wordpress wordpress 4.0.3
  • Wordpress wordpress 4.0.30
  • Wordpress wordpress 4.0.31
  • Wordpress wordpress 4.0.4
  • Wordpress wordpress 4.0.5
  • Wordpress wordpress 4.0.6
  • Wordpress wordpress 4.0.7
  • Wordpress wordpress 4.0.8
  • Wordpress wordpress 4.0.9
  • Wordpress wordpress 4.1
  • Wordpress wordpress 4.1.1
  • Wordpress wordpress 4.1.10
  • Wordpress wordpress 4.1.11
  • Wordpress wordpress 4.1.12
  • Wordpress wordpress 4.1.13
  • Wordpress wordpress 4.1.14
  • Wordpress wordpress 4.1.15
  • Wordpress wordpress 4.1.16
  • Wordpress wordpress 4.1.17
  • Wordpress wordpress 4.1.18
  • Wordpress wordpress 4.1.19
  • Wordpress wordpress 4.1.2
  • Wordpress wordpress 4.1.20
  • Wordpress wordpress 4.1.21
  • Wordpress wordpress 4.1.22
  • Wordpress wordpress 4.1.23
  • Wordpress wordpress 4.1.24
  • Wordpress wordpress 4.1.25
  • Wordpress wordpress 4.1.26
  • Wordpress wordpress 4.1.27
  • Wordpress wordpress 4.1.28
  • Wordpress wordpress 4.1.29
  • Wordpress wordpress 4.1.3
  • Wordpress wordpress 4.1.30
  • Wordpress wordpress 4.1.31
  • Wordpress wordpress 4.1.4
  • Wordpress wordpress 4.1.5
  • Wordpress wordpress 4.1.6
  • Wordpress wordpress 4.1.7
  • Wordpress wordpress 4.1.8
  • Wordpress wordpress 4.1.9
  • Wordpress wordpress 4.2
  • Wordpress wordpress 4.2.1
  • Wordpress wordpress 4.2.10
  • Wordpress wordpress 4.2.11
  • Wordpress wordpress 4.2.12
  • Wordpress wordpress 4.2.13
  • Wordpress wordpress 4.2.14
  • Wordpress wordpress 4.2.15
  • Wordpress wordpress 4.2.16
  • Wordpress wordpress 4.2.17
  • Wordpress wordpress 4.2.18
  • Wordpress wordpress 4.2.19
  • Wordpress wordpress 4.2.2
  • Wordpress wordpress 4.2.20
  • Wordpress wordpress 4.2.21
  • Wordpress wordpress 4.2.22
  • Wordpress wordpress 4.2.23
  • Wordpress wordpress 4.2.24
  • Wordpress wordpress 4.2.25
  • Wordpress wordpress 4.2.26
  • Wordpress wordpress 4.2.27
  • Wordpress wordpress 4.2.28
  • Wordpress wordpress 4.2.3
  • Wordpress wordpress 4.2.4
  • Wordpress wordpress 4.2.5
  • Wordpress wordpress 4.2.6
  • Wordpress wordpress 4.2.7
  • Wordpress wordpress 4.2.8
  • Wordpress wordpress 4.2.9
  • Wordpress wordpress 4.3
  • Wordpress wordpress 4.3.0
  • Wordpress wordpress 4.3.1
  • Wordpress wordpress 4.3.10
  • Wordpress wordpress 4.3.11
  • Wordpress wordpress 4.3.12
  • Wordpress wordpress 4.3.13
  • Wordpress wordpress 4.3.14
  • Wordpress wordpress 4.3.15
  • Wordpress wordpress 4.3.16
  • Wordpress wordpress 4.3.17
  • Wordpress wordpress 4.3.18
  • Wordpress wordpress 4.3.19
  • Wordpress wordpress 4.3.2
  • Wordpress wordpress 4.3.20
  • Wordpress wordpress 4.3.21
  • Wordpress wordpress 4.3.22
  • Wordpress wordpress 4.3.23
  • Wordpress wordpress 4.3.24
  • Wordpress wordpress 4.3.3
  • Wordpress wordpress 4.3.4
  • Wordpress wordpress 4.3.5
  • Wordpress wordpress 4.3.6
  • Wordpress wordpress 4.3.7
  • Wordpress wordpress 4.3.8
  • Wordpress wordpress 4.3.9
  • Wordpress wordpress 4.4
  • Wordpress wordpress 4.4.0
  • Wordpress wordpress 4.4.1
  • Wordpress wordpress 4.4.10
  • Wordpress wordpress 4.4.11
  • Wordpress wordpress 4.4.12
  • Wordpress wordpress 4.4.13
  • Wordpress wordpress 4.4.14
  • Wordpress wordpress 4.4.15
  • Wordpress wordpress 4.4.16
  • Wordpress wordpress 4.4.17
  • Wordpress wordpress 4.4.18
  • Wordpress wordpress 4.4.19
  • Wordpress wordpress 4.4.2
  • Wordpress wordpress 4.4.20
  • Wordpress wordpress 4.4.21
  • Wordpress wordpress 4.4.22
  • Wordpress wordpress 4.4.23
  • Wordpress wordpress 4.4.3
  • Wordpress wordpress 4.4.4
  • Wordpress wordpress 4.4.5
  • Wordpress wordpress 4.4.6
  • Wordpress wordpress 4.4.7
  • Wordpress wordpress 4.4.8
  • Wordpress wordpress 4.4.9
  • Wordpress wordpress 4.5
  • Wordpress wordpress 4.5.1
  • Wordpress wordpress 4.5.10
  • Wordpress wordpress 4.5.11
  • Wordpress wordpress 4.5.12
  • Wordpress wordpress 4.5.13
  • Wordpress wordpress 4.5.14
  • Wordpress wordpress 4.5.15
  • Wordpress wordpress 4.5.16
  • Wordpress wordpress 4.5.17
  • Wordpress wordpress 4.5.18
  • Wordpress wordpress 4.5.19
  • Wordpress wordpress 4.5.2
  • Wordpress wordpress 4.5.20
  • Wordpress wordpress 4.5.21
  • Wordpress wordpress 4.5.22
  • Wordpress wordpress 4.5.3
  • Wordpress wordpress 4.5.4
  • Wordpress wordpress 4.5.5
  • Wordpress wordpress 4.5.6
  • Wordpress wordpress 4.5.7
  • Wordpress wordpress 4.5.8
  • Wordpress wordpress 4.5.9
  • Wordpress wordpress 4.6
  • Wordpress wordpress 4.6.1
  • Wordpress wordpress 4.6.10
  • Wordpress wordpress 4.6.11
  • Wordpress wordpress 4.6.12
  • Wordpress wordpress 4.6.13
  • Wordpress wordpress 4.6.14
  • Wordpress wordpress 4.6.15
  • Wordpress wordpress 4.6.16
  • Wordpress wordpress 4.6.17
  • Wordpress wordpress 4.6.18
  • Wordpress wordpress 4.6.19
  • Wordpress wordpress 4.6.2
  • Wordpress wordpress 4.6.3
  • Wordpress wordpress 4.6.4
  • Wordpress wordpress 4.6.5
  • Wordpress wordpress 4.6.6
  • Wordpress wordpress 4.6.7
  • Wordpress wordpress 4.6.8
  • Wordpress wordpress 4.6.9
  • Wordpress wordpress 4.7
  • Wordpress wordpress 4.7.1
  • Wordpress wordpress 4.7.10
  • Wordpress wordpress 4.7.11
  • Wordpress wordpress 4.7.12
  • Wordpress wordpress 4.7.13
  • Wordpress wordpress 4.7.14
  • Wordpress wordpress 4.7.15
  • Wordpress wordpress 4.7.16
  • Wordpress wordpress 4.7.17
  • Wordpress wordpress 4.7.18
  • Wordpress wordpress 4.7.2
  • Wordpress wordpress 4.7.3
  • Wordpress wordpress 4.7.4
  • Wordpress wordpress 4.7.5
  • Wordpress wordpress 4.7.6
  • Wordpress wordpress 4.7.7
  • Wordpress wordpress 4.7.8
  • Wordpress wordpress 4.7.9
  • Wordpress wordpress 4.8
  • Wordpress wordpress 4.8.1
  • Wordpress wordpress 4.8.10
  • Wordpress wordpress 4.8.11
  • Wordpress wordpress 4.8.12
  • Wordpress wordpress 4.8.13
  • Wordpress wordpress 4.8.14
  • Wordpress wordpress 4.8.2
  • Wordpress wordpress 4.8.3
  • Wordpress wordpress 4.8.4
  • Wordpress wordpress 4.8.5
  • Wordpress wordpress 4.8.6
  • Wordpress wordpress 4.8.7
  • Wordpress wordpress 4.8.8
  • Wordpress wordpress 4.8.9
  • Wordpress wordpress 4.9
  • Wordpress wordpress 4.9.1
  • Wordpress wordpress 4.9.10
  • Wordpress wordpress 4.9.11
  • Wordpress wordpress 4.9.12
  • Wordpress wordpress 4.9.13
  • Wordpress wordpress 4.9.14
  • Wordpress wordpress 4.9.15
  • Wordpress wordpress 4.9.2
  • Wordpress wordpress 4.9.3
  • Wordpress wordpress 4.9.4
  • Wordpress wordpress 4.9.5
  • Wordpress wordpress 4.9.6
  • Wordpress wordpress 4.9.7
  • Wordpress wordpress 4.9.8
  • Wordpress wordpress 4.9.9
  • Wordpress wordpress 5.0
  • Wordpress wordpress 5.0.1
  • Wordpress wordpress 5.0.10
  • Wordpress wordpress 5.0.2
  • Wordpress wordpress 5.0.3
  • Wordpress wordpress 5.0.4
  • Wordpress wordpress 5.0.5
  • Wordpress wordpress 5.0.6
  • Wordpress wordpress 5.0.7
  • Wordpress wordpress 5.0.8
  • Wordpress wordpress 5.0.9
  • Wordpress wordpress 5.1

References

  • BugTraq: 107411
  • CVE: CVE-2019-9787
  • URL: https://blog.ripstech.com/2019/wordpress-csrf-to-rce/
  • URL: https://wordpress.org/news/2019/03/wordpress-5-1-1-security-and-maintenance-release/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out