Skip to content
OpenAdvisories
Unscored DSA-2190-1 2 CVEs

wordpress - several

Published Mar 11, 2011 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 wordpress 3.0.5+dfsg-0+squeeze1

Vulnerabilities 2

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to injec…

  • Unscored —

    wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read (1)…