wordpress - security update

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2014-9031

  Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9033

  Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9034 Public exploit EPSS 83%

  wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 al…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9035

  Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9036

  Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x bef…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9037

  WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to ob…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9038

  wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows rem…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9039

  wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2015-3438

  Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, …

  wordpress Debian
  Aug 5, 2015
• Unscored —
  CVE-2015-3439

  Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, a…

  wordpress Debian
  Aug 5, 2015
• Unscored —
  CVE-2015-3440 Public exploit EPSS 17%

  Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to …

  wordpress Debian
  Aug 3, 2015