Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 7 | wordpress | 3.6.1+dfsg-1~deb7u15 |
Vulnerabilities 6
-
Unscored —
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for r…
-
Unscored —
In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files…
-
Unscored —
In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.
-
Unscored —
In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an in…
-
Unscored —
In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialo…
-
Unscored —
In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.