wordpress - security update

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2017-5488

  Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote …

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5489

  Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authent…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5490

  Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in …

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5491

  wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofe…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5492

  Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5493

  wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random n…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5610

  wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility…

  wordpress wordpress Debian Ubuntu
  Jan 30, 2017
• Unscored —
  CVE-2017-5611 EPSS 10%

  SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attac…

  wordpress wordpress Debian Ubuntu
  Jan 30, 2017
• Unscored —
  CVE-2017-5612

  Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in …

  wordpress wordpress Debian Ubuntu
  Jan 30, 2017