WordPress Plugins or themes that leverages the genericons package is vulnerable to a DOM-based Cross-Site Scripting (XSS) vulnerability due to an insecure file included with genericons.

JetPack plugin and the TwentyFifteen theme (installed by default) are found to be vulnerable. The exact count is difficult to grasp, but both the plugin and theme are default installs in millions of WordPress installs.

The main issue here is the genericons package, so any plugin that makes use of this package is potentially vulnerable if it includes the example.html file that comes with the package.


Dell PowerEdge R620 Server | 2x 2680 V2 2.8GHz = 20 Cores | 96GB | 2x 1TB SAS picture

Dell PowerEdge R620 Server | 2x 2680 V2 2.8GHz = 20 Cores | 96GB | 2x 1TB SAS

$338.99



Dell PowerEdge T130 Intel Xeon E3-1220 v5 8GB RAM 1TB HDD VGA USB Win 10 Server picture

Dell PowerEdge T130 Intel Xeon E3-1220 v5 8GB RAM 1TB HDD VGA USB Win 10 Server

$309.99



Dell PowerEdge R630 Server | 2x E5-2680v3 24cores 2.4GHz | 128GB | H730 | 2x750W picture

Dell PowerEdge R630 Server | 2x E5-2680v3 24cores 2.4GHz | 128GB | H730 | 2x750W

$530.00



HP Proliant DL360p G8 Server 2x E5-2690 2.9GHz =16 Cores | 128GB | 2x trays picture

HP Proliant DL360p G8 Server 2x E5-2690 2.9GHz =16 Cores | 128GB | 2x trays

$275.20



HYVE ZEUS V1 1U SERVER 2x 10 CORE E5-2670V2 2.5GHz 32GB RAM RAIL NO HDD picture

HYVE ZEUS V1 1U SERVER 2x 10 CORE E5-2670V2 2.5GHz 32GB RAM RAIL NO HDD

$142.00



HPE ProLiant EC200a Mini Server, Xeon D1518 2.2GHz CPU picture

HPE ProLiant EC200a Mini Server, Xeon D1518 2.2GHz CPU

$159.00



Dell PowerEdge R620 Server 2x E5-2650L V2 2.6GHz =20 Cores | 32GB | 2x 1TB SATA picture

Dell PowerEdge R620 Server 2x E5-2650L V2 2.6GHz =20 Cores | 32GB | 2x 1TB SATA

$185.60



HP Proliant DL360p G8 Server | 2x E5-2680 2.7GHz =16 Cores | 96GB | 2x 300GB SAS picture

HP Proliant DL360p G8 Server | 2x E5-2680 2.7GHz =16 Cores | 96GB | 2x 300GB SAS

$179.99



Dell PowerEdge R620 Server | 2x E5-2680 V2 2.8GHz =20 Cores | 128GB | 2x 1TB SAS picture

Dell PowerEdge R620 Server | 2x E5-2680 V2 2.8GHz =20 Cores | 128GB | 2x 1TB SAS

$324.99



Supermicro 1U Server 10 BAY SFF 2x Xeon E5-2667 v2 3.30Ghz 128GB 2x 10GBase-T picture

Supermicro 1U Server 10 BAY SFF 2x Xeon E5-2667 v2 3.30Ghz 128GB 2x 10GBase-T

$369.00