Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | wordpress | 4.1+dfsg-1+deb8u17 |
| Debian · 9 | wordpress | 4.7.5+dfsg-2+deb9u3 |
Vulnerabilities 2
-
Unscored —
Before WordPress 4.9.5, the redirection URL for the login page was not validated or sanitized if forced to use HTTPS.
-
Unscored —
Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in …