Skip to content
OpenAdvisories
Unscored DSA-3383-1 8 CVEs

wordpress - security update

Published Oct 29, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 wordpress 3.6.1+dfsg-1~deb7u8

Vulnerabilities 8

  • Unscored —
    CVE-2015-2213

    SQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in WordPress before 4.2.4 …

    wordpress Debian
  • Unscored —
    CVE-2015-5622

    Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrar…

    wordpress Debian
  • Unscored —
    CVE-2015-5714

    Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web scri…

    wordpress Debian
  • Unscored —
    CVE-2015-5715

    The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 al…

    wordpress Debian
  • Unscored —
    CVE-2015-5731

    Cross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4 allows remote attackers …

    wordpress Debian
  • Unscored —
    CVE-2015-5732

    Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-wi…

    wordpress Debian
  • Unscored —
    CVE-2015-5734

    Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPre…

    wordpress Debian
  • Unscored —
    CVE-2015-7989

    Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated u…

    wordpress Debian