WordPress Plugins or themes that leverages the genericons package is vulnerable to a DOM-based Cross-Site Scripting (XSS) vulnerability due to an insecure file included with genericons.

JetPack plugin and the TwentyFifteen theme (installed by default) are found to be vulnerable. The exact count is difficult to grasp, but both the plugin and theme are default installs in millions of WordPress installs.

The main issue here is the genericons package, so any plugin that makes use of this package is potentially vulnerable if it includes the example.html file that comes with the package.


Dell PowerEdge R620 Server | 2x E5-2650 = 16 Cores | 32GB | H710 | 2x 1TB SATA picture

Dell PowerEdge R620 Server | 2x E5-2650 = 16 Cores | 32GB | H710 | 2x 1TB SATA

$266.95



Supermicro 1U Server 10 BAY SFF 2x Xeon E5-2667 v2 3.30Ghz 128GB 2x 10GBase-T picture

Supermicro 1U Server 10 BAY SFF 2x Xeon E5-2667 v2 3.30Ghz 128GB 2x 10GBase-T

$389.00



Dell PowerEdge R620 Server | 2x 2680 V2 2.8GHz = 20 Cores | 96GB | 2x 1TB SAS picture

Dell PowerEdge R620 Server | 2x 2680 V2 2.8GHz = 20 Cores | 96GB | 2x 1TB SAS

$379.95



HP ProLiant DL360p G8 1U Server - Dual E5 CPU, up to 128GB, Configure to order picture

HP ProLiant DL360p G8 1U Server - Dual E5 CPU, up to 128GB, Configure to order

$239.99



HPE ProLiant EC200a Mini Server, Xeon D1518 2.2GHz CPU picture

HPE ProLiant EC200a Mini Server, Xeon D1518 2.2GHz CPU

$199.00



HYVE ZEUS V1 1U SERVER 2x XEON EIGHT CORE E5-2680 2.7GHz 16GB RAM NO HDD picture

HYVE ZEUS V1 1U SERVER 2x XEON EIGHT CORE E5-2680 2.7GHz 16GB RAM NO HDD

$134.00



Dell PowerEdge R710 2.5

Dell PowerEdge R710 2.5" 2U Server 2x X5670 2.93GHZ 12-Core 32gb 2x Trays Perc6i

$109.99



Dell PowerEdge R720xd Server 2x E5-2670 2.6Ghz 16Cores | Pick Your RAM & Storage picture

Dell PowerEdge R720xd Server 2x E5-2670 2.6Ghz 16Cores | Pick Your RAM & Storage

$374.99



Dell PowerEdge R710 6-Bay 3.5

Dell PowerEdge R710 6-Bay 3.5" Server 12-Cores X5675 3.06GHz 8GB RAM PERC 6/i

$179.99



Supermicro 2U Server 8 HD Bay 3.5 LFF E ATX Storage Chassis TQ Direct Connect picture

Supermicro 2U Server 8 HD Bay 3.5 LFF E ATX Storage Chassis TQ Direct Connect

$199.00