Skip to content
OpenAdvisories
Unscored DSA-3250-1 3 CVEs

wordpress - security update

Published May 4, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 7 wordpress 3.6.1+dfsg-1~deb7u6
Debian · 8 wordpress 4.1+dfsg-1+deb8u1

Vulnerabilities 3

  • Unscored —
    CVE-2015-3438

    Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, …

    wordpress Debian
  • Unscored —
    CVE-2015-3439

    Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, a…

    wordpress Debian
  • Unscored —
    CVE-2015-3440 Public exploit EPSS 17%

    Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to …

    wordpress Debian