wordpress - several

Fixed packages 1

Vulnerabilities 15

• Unscored —
  CVE-2011-3122

  Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors rel…

  wordpress Debian
  Aug 10, 2011
• Unscored —
  CVE-2011-3125

  Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors rel…

  wordpress Debian
  Aug 10, 2011
• Unscored —
  CVE-2011-3126

  WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via cano…

  wordpress Debian
  Aug 10, 2011
• Unscored —
  CVE-2011-3127

  WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a f…

  wordpress Debian
  Aug 10, 2011
• Unscored —
  CVE-2011-3128

  WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote a…

  wordpress Debian
  Aug 10, 2011
• Unscored —
  CVE-2011-3129

  The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerou…

  wordpress Debian
  Aug 10, 2011
• Unscored —
  CVE-2011-3130

  wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors rela…

  wordpress Debian
  Aug 10, 2011
• Unscored —
  CVE-2011-4956

  Cross-site scripting (XSS) vulnerability in WordPress before 3.1.1 allows remote attackers to inject arbitrary web scri…

  wordpress Debian
  Jun 27, 2012
• Unscored —
  CVE-2011-4957

  The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before…

  wordpress Debian
  Jun 27, 2012
• Unscored —
  CVE-2012-2399

  Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFupload 2.2.0.1 and earlier, as used in WordPress before…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2400

  Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vector…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2401

  Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables script…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2402

  wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended acces…

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2403

  wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes …

  wordpress Debian
  Apr 21, 2012
• Unscored —
  CVE-2012-2404

  wp-comments-post.php in WordPress before 3.3.2 supports offsite redirects, which makes it easier for remote attackers t…

  wordpress Debian
  Apr 21, 2012