Unscored DLA-860-1 3 CVEs

wordpress - security update

Published Mar 17, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	wordpress	3.6.1+dfsg-1~deb7u14

Vulnerabilities 3

Unscored —

CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstra…

wordpress wordpress Debian Ubuntu

Mar 12, 2017
Unscored —

CVE-2017-6815

In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.

wordpress wordpress Debian Ubuntu

Mar 12, 2017
Unscored —

CVE-2017-6816

In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin de…

wordpress wordpress Debian Ubuntu

Mar 12, 2017