wordpress - security update

Fixed packages 1

Vulnerabilities 8

• Unscored —
  CVE-2018-20147

  In WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended restrictions on deleti…

  wordpress wordpress Debian Ubuntu
  Dec 14, 2018
• Unscored —
  CVE-2018-20148 Public exploit EPSS 27%

  In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted met…

  wordpress wordpress Debian Ubuntu
  Dec 14, 2018
• Unscored —
  CVE-2018-20149

  In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files…

  wordpress wordpress Debian Ubuntu
  Dec 14, 2018
• Unscored —
  CVE-2018-20150

  In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.

  wordpress wordpress Debian Ubuntu
  Dec 14, 2018
• Unscored —
  CVE-2018-20151

  In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler…

  wordpress wordpress Debian Ubuntu
  Dec 14, 2018
• Unscored —
  CVE-2018-20152

  In WordPress before 4.9.9 and 5.x before 5.0.1, authors could bypass intended restrictions on post types via crafted in…

  wordpress wordpress Debian Ubuntu
  Dec 14, 2018
• Unscored —
  CVE-2018-20153

  In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privi…

  wordpress wordpress Debian Ubuntu
  Dec 14, 2018
• Unscored —
  CVE-2019-8942 Public exploit EPSS 83%

  WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry c…

  wordpress wordpress Debian Ubuntu
  Feb 20, 2019