CVE-2015-5714

6.1 mediumEPSS 6.9%

Medium (6.1) in wordpress wordpress. EPSS 6.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 6.9% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2016-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wordpress:wordpress

References

http://www.debian.org/security/2015/dsa-3375
http://www.debian.org/security/2015/dsa-3383
http://www.securityfocus.com/bid/76745
http://www.securitytracker.com/id/1033979
https://codex.wordpress.org/Version_4.3.1

Check your stack JSON