Skip to content
OpenAdvisories
High DSA-4985-1 1 CVE

wordpress - security update

Published Oct 14, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 wordpress 5.0.14+dfsg1-0+deb10u1
Debian · 11 wordpress 5.7.3+dfsg1-0+deb11u1

Vulnerabilities 1

  • High 7.6
    CVE-2021-39201

    Authenticated cross-site scripting (XSS) in WordPress editor

    WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. ### Impact The issue allows an authenticated but low-privileged user (like contributor/author) to execute XSS in the editor. This bypasse…

    WordPress wordpress-develop wordpress wordpress Web / CMS Debian Ubuntu