Skip to content
OpenAdvisories
Unscored DLA-294-1 5 CVEs

wordpress - security update

Published Aug 18, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 wordpress 3.6.1+dfsg-1~deb6u7

Vulnerabilities 5

  • Unscored —
    CVE-2015-2213

    SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 …

    wordpress Debian
  • Unscored —
    CVE-2015-5622

    Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrar…

    wordpress Debian
  • Unscored —
    CVE-2015-5731

    Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers …

    wordpress Debian
  • Unscored —
    CVE-2015-5732

    Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-wi…

    wordpress Debian
  • Unscored —
    CVE-2015-5734

    Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPre…

    wordpress Debian