Skip to content
OpenAdvisories
Unscored DSA-3375-1 3 CVEs

wordpress - security update

Published Oct 19, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 wordpress 4.1+dfsg-1+deb8u5

Vulnerabilities 3

  • Unscored —
    CVE-2015-5714

    Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web scri…

    wordpress Debian
  • Unscored —
    CVE-2015-5715

    The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 al…

    wordpress Debian
  • Unscored —
    CVE-2015-7989

    Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated u…

    wordpress Debian