Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | wordpress | 4.1+dfsg-1+deb8u9 |
Vulnerabilities 7
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to …
-
Unscored —
The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in Wor…
-
Unscored —
WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the abili…
-
Unscored —
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute f…
-
Unscored —
WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge …
-
Unscored —
WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified ve…