wordpress - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2014-9031

  Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9033

  Cross-site request forgery (CSRF) vulnerability in wp-login.php in WordPress 3.7.4, 3.8.4, 3.9.2, and 4.0 allows remote…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9034 Public exploit EPSS 83%

  wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 al…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9035

  Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9036

  Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x bef…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9037

  WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to ob…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9038

  wp-includes/http.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows rem…

  wordpress Debian
  Nov 25, 2014
• Unscored —
  CVE-2014-9039

  wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote…

  wordpress Debian
  Nov 25, 2014