Skip to content
OpenAdvisories
Unscored DLA-1742-1 2 CVEs

wordpress - security update

Published Apr 1, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 wordpress 4.1.26+dfsg-1+deb8u1

Vulnerabilities 2

  • Unscored —
    CVE-2019-8942 Public exploit EPSS 83%

    WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry c…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2019-9787 Public exploit EPSS 39%

    WordPress before 5.1.1 does not properly filter comment content, leading to Remote Code Execution by unauthenticated us…

    wordpress wordpress Debian Ubuntu