wordpress - several vulnerabilities

Fixed packages 1

Vulnerabilities 5

• Unscored —
  CVE-2007-0540 Public exploit

  WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service c…

  wordpress Debian
  Jan 29, 2007
• Unscored —
  CVE-2007-3639

  WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive …

  wordpress Debian
  Jul 10, 2007
• Unscored —
  CVE-2007-4153

  Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inj…

  wordpress Debian
  Aug 3, 2007
• Unscored —
  CVE-2007-4154

  SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arb…

  wordpress Debian
  Aug 3, 2007
• Unscored —
  CVE-2008-2146

  wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF…

  wordpress Debian
  May 12, 2008