wordpress - regression fix

Fixed packages 1

Vulnerabilities 11

• Medium —
  CVE-2008-1502 EPSS 11%

  Moodle vulnerable to Cross-site scripting

  The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a st…

  moodle/moodle wordpress Debian Packagist
  Mar 25, 2008
• Unscored —
  CVE-2008-4106

  WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maxi…

  wordpress Debian
  Sep 18, 2008
• Unscored —
  CVE-2008-4769 Public exploit

  Directory traversal vulnerability in the get_category_template function in wp-includes/theme.php in WordPress 2.3.3 and…

  wordpress Debian
  Oct 28, 2008
• Unscored —
  CVE-2008-4796

  The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-sn…

  wordpress libphp-snoopy Debian
  Oct 30, 2008
• Unscored —
  CVE-2008-5113

  WordPress 2.6.3 relies on the REQUEST superglobal array in certain dangerous situations, which makes it easier for remo…

  wordpress Debian
  Nov 17, 2008
• Unscored —
  CVE-2008-6762

  Open redirect vulnerability in wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to redirect u…

  wordpress Debian
  Apr 28, 2009
• Unscored —
  CVE-2008-6767

  wp-admin/upgrade.php in WordPress, probably 2.6.x, allows remote attackers to upgrade the application, and possibly cau…

  wordpress Debian
  Apr 28, 2009
• Unscored —
  CVE-2009-2334 Public exploit

  wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access …

  wordpress Debian
  Jul 10, 2009
• Unscored —
  CVE-2009-2851 Public exploit

  Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attacke…

  wordpress Debian
  Aug 18, 2009
• Unscored —
  CVE-2009-2853

  Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to (1) admin-footer.php, (2) edi…

  wordpress Debian
  Aug 18, 2009
• Unscored —
  CVE-2009-2854

  Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthori…

  wordpress Debian
  Aug 18, 2009