wordpress - security update

Fixed packages 1

Vulnerabilities 4

• Medium 6.5
  CVE-2024-31111

  WordPress Core < 6.5.5 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 …

  Automattic WordPress wordpress wordpress Web / CMS Debian Ubuntu
  Jun 25, 2024
• Medium 6.4
  CVE-2024-6307

  WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API

  WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to insufficient input sanitization and output escaping on URLs. This makes it possible for authenticated attackers, with contributor-level acce…

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  Jun 25, 2024
• Medium 5.9
  CVE-2025-58674

  WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored XSS. WordPress core security team is aware of the issue and working on a fix. This is low severity vulnerability that requires an att…

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu Wolfi
  Sep 23, 2025
• Medium 4.3
  CVE-2025-58246

  WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability

  Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. The WordPress Core security team is aware of the issue and is already working on a fix. This is a low-severity vulnerability. Contributor-lev…

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu Wolfi
  Sep 23, 2025