Skip to content
OpenAdvisories
Unscored DSA-3332-1 6 CVEs

wordpress - security update

Published Aug 11, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 wordpress 4.1+dfsg-1+deb8u4

Vulnerabilities 6

  • Unscored —
    CVE-2015-2213

    SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 …

    wordpress Debian
  • Unscored —
    CVE-2015-5622

    Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrar…

    wordpress Debian
  • Unscored —
    CVE-2015-5730

    The sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress before 4.2.4 does not …

    wordpress Debian
  • Unscored —
    CVE-2015-5731

    Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers …

    wordpress Debian
  • Unscored —
    CVE-2015-5732

    Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-wi…

    wordpress Debian
  • Unscored —
    CVE-2015-5734

    Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPre…

    wordpress Debian