Unscored DLA-1980-1 4 CVEs

wordpress - security update

Published Nov 5, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	wordpress	4.1.28+dfsg-0+deb8u1

Vulnerabilities 4

Unscored —

CVE-2019-17669

WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider …

wordpress wordpress Debian Ubuntu

Oct 17, 2019
Unscored —

CVE-2019-17670

WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows paths are mishandled duri…

wordpress wordpress Debian Ubuntu

Oct 17, 2019
Unscored —

CVE-2019-17671 Public exploit Scanner template EPSS 37%

In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is …

wordpress wordpress Debian Ubuntu

Oct 17, 2019
Unscored —

CVE-2019-17675

WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, p…

wordpress wordpress Debian Ubuntu

Oct 17, 2019