Skip to content
OpenAdvisories
Unscored DSA-3472-1 2 CVEs

wordpress - security update

Published Feb 8, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 wordpress 3.6.1+dfsg-1~deb7u10
Debian · 8 wordpress 4.1+dfsg-1+deb8u8

Vulnerabilities 2

  • Unscored —

    Open redirect vulnerability in the wp_validate_redirect function in wp-includes/pluggable.php in WordPress before 4.4.2…

  • Unscored —

    The wp_http_validate_url function in wp-includes/http.php in WordPress before 4.4.2 allows remote attackers to conduct …