Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | wordpress | 4.1.25+dfsg-1+deb8u1 |
Vulnerabilities 7
-
Unscored —
In WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended restrictions on deleti…
-
Unscored —
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted met…
-
Unscored —
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files…
-
Unscored —
In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.
-
Unscored —
In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler…
-
Unscored —
In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted in…
-
Unscored —
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privi…