Skip to content
OpenAdvisories
Unscored DLA-321-1 3 CVEs

wordpress - security update

Published Sep 30, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 wordpress 3.6.1+dfsg-1~deb6u8

Vulnerabilities 3

  • Unscored —
    CVE-2015-5714

    Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web scri…

    wordpress Debian
  • Unscored —
    CVE-2015-5715

    The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 al…

    wordpress Debian
  • Unscored —
    CVE-2015-7989

    Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated u…

    wordpress Debian