Wordpress 4.7.1

How it was found

Greetings,

I observed that your website https://nextcloud.com still use wordpress 4.7.1

[+] WordPress version 4.7.1 (Released on 2017-01-11) identified from advanced fingerprinting

This version of wordpress is vulnerable to :

• WP_Query SQLi injection
• (XSS) vulnerability was in the posts list table

Fix :

• Upgrade to wordpress 4.7.2
• More information : https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release/

Best regards Rbcafe