Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | wordpress | 5.0.15+dfsg1-0+deb10u1 |
| Debian · 11 | wordpress | 5.7.5+dfsg1-0+deb11u1 |
Vulnerabilities 4
-
High 8.0
SQL injection in WordPress
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain wa…
-
High 8.0CVE-2022-21662 EPSS 65%
Stored XSS in WordPress
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users (like author) in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high…
-
High 7.4
SQL injection in WordPress
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there's potential for unintended SQL queries to be executed. This has been patched in Wo…
-
Medium 6.6
Authenticated Object Injection in Multisites in WordPress
WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has b…