WordPress Improper handling of post metadata check

The post metadata are relevant information about a web application’s blog post. A post metadata includes published date, category, author name and many more. In WordPress version 2.5.0-4.7.4, the Post-Meta Data Values are Improperly Handled in XML-RPC. The WordPress uses an XML-RPC interface, which was introduced as an implementation of a WordPress-specific functionality in an API called the WordPress API. These APIs helps to reduce the complexity of the application and could be used wherever possible. The clients should be able to use the APIs beginning with the wp prefix. The WordPress also supports APIs like the Blogger API, metaWeblog API, Movable Type API, and the Pingback API. With the WordPress XML-RPC support, the site administrator can post contents to WordPress blog using any Weblog Clients. The XML-RPC system can be vastly extended to admin’s preferences by using WordPress Plugins to modify its behaviour.

Impact and Fixes

Written by

Rejah Rehim

Co-founder, Director

Rejah brings more than 12 years of industry experience in Information Technology. He is a fervent security enthusiast and serves as a Project Leader at OWASP Foundation, and Commander (Hon.) at Kerala Police. He has authored two books titled “Effective Python Penetration Testing” and “Python Penetration Testing Cookbook” and is the creator of 9 Mozilla add-ons.