In previous versions the compression option contains a cross-site request forgery (CSRF) vulnerability that can be exploited by hackers.
This vulnerability affects the following application versions:
- WordPress 4.1
- WordPress 4.1.1
- WordPress 4.1.2
- WordPress 4.1.3
- WordPress 4.1.4
- WordPress 4.1.5
- WordPress 4.1.6
- WordPress 4.1.7
- WordPress 4.1.8
- WordPress 4.1.9
- WordPress 4.1.10
- WordPress 4.1.11
- WordPress 4.1.12
- WordPress 4.1.13
- WordPress 4.1.14
- WordPress 4.1.15
- WordPress 4.1.16
- WordPress 4.1.17
- WordPress 4.1.18
- WordPress 4.2
- WordPress 4.2.1
- WordPress 4.2.2
- WordPress 4.2.3
- WordPress 4.2.4
- WordPress 4.2.5
- WordPress 4.2.6
- WordPress 4.2.7
- WordPress 4.2.8
- WordPress 4.2.9
- WordPress 4.2.10
- WordPress 4.2.11
- WordPress 4.2.12
- WordPress 4.2.13
- WordPress 4.2.14
- WordPress 4.2.15
- WordPress 4.3
- WordPress 4.3.1
- WordPress 4.3.2
- WordPress 4.3.3
- WordPress 4.3.4
- WordPress 4.3.5
- WordPress 4.3.6
- WordPress 4.3.7
- WordPress 4.3.8
- WordPress 4.3.9
- WordPress 4.3.10
- WordPress 4.3.11
- WordPress 4.4
- WordPress 4.4.1
- WordPress 4.4.2