WordPress 4.2.20 Vulnerabilities

Meta Data

2019-03-13	WordPress 3.9-5.1 - Comment Cross-Site Scripting (XSS)	fixed in version 4.2.23
2019-02-19	WordPress 3.7-5.0 (except 4.9.9) - Authenticated Code Execution	fixed in version 5.0.1
2018-12-13	WordPress <= 5.0 - Authenticated File Delete	fixed in version 4.2.22
2018-12-13	WordPress <= 5.0 - Authenticated Post Type Bypass	fixed in version 4.2.22
2018-12-13	WordPress <= 5.0 - PHP Object Injection via Meta Data	fixed in version 4.2.22
2018-12-13	WordPress <= 5.0 - Authenticated Cross-Site Scripting (XSS)	fixed in version 4.2.22
2018-12-13	WordPress <= 5.0 - Cross-Site Scripting (XSS) that could affect plugins	fixed in version 4.2.22
2018-12-13	WordPress <= 5.0 - User Activation Screen Search Engine Indexing	fixed in version 4.2.22
2018-12-13	WordPress <= 5.0 - File Upload to XSS on Apache Web Servers	fixed in version 4.2.22
2018-06-27	WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion	fixed in version 4.2.21