Unscored DSA-2901-1 2 CVEs

wordpress - security update

Published Apr 12, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 6.0	wordpress	3.6.1+dfsg-1~deb6u2
Debian · 7	wordpress	3.6.1+dfsg-1~deb7u2

Vulnerabilities 2

Unscored —

CVE-2014-0165

WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Cont…

wordpress Debian

Apr 9, 2014
Unscored —

CVE-2014-0166 Public exploit

The wp_validate_auth_cookie function in wp-includes/pluggable.php in WordPress before 3.7.2 and 3.8.x before 3.8.2 does…

wordpress Debian

Apr 9, 2014