Skip to content
OpenAdvisories
Unscored DSA-3328-1 2 CVEs

wordpress - security update

Published Aug 4, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 wordpress 4.1+dfsg-1+deb8u2

Vulnerabilities 2

  • Unscored —
    CVE-2015-3429

    Cross-site scripting (XSS) vulnerability in example.html in Genericons before 3.3.1, as used in WordPress before 4.2.2,…

    wordpress Debian
  • Unscored —
    CVE-2015-5623

    WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote authenticated users to b…

    wordpress Debian