whizz vulnerabilities and fixes

Recent CVEs affecting whizz, with upgrade or downgrade steps. 2 tracked.

whizz has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-04-24. Highest priority: CVE-2016-1000154 (score 49/100).

• CVE-2017-8099 HIGH 8.1 UPGRADE There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users
• CVE-2016-1000154 MEDIUM 6.1 UPGRADE Reflected XSS in wordpress plugin whizz v1.0.7

FAQ

How do I fix whizz vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is whizz being exploited right now?

None of the tracked whizz CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which whizz CVE should I patch first?

CVE-2016-1000154 currently ranks highest (49/100): Reflected XSS in wordpress plugin whizz v1.0.7.

← Back to latest CVEs