Skip to content
OpenAdvisories
Medium DSA-6091-1 2 CVEs

wordpress - security update

Published Dec 21, 2025 · Updated Dec 21, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 13 wordpress 6.8.3+dfsg1-0+deb13u1

Vulnerabilities 2

  • Medium 5.9
    CVE-2025-58674

    WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored XSS. WordPress core security team is aware of the issue and working on a fix. This is low severity vulnerability that requires an att…

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu Wolfi
  • Medium 4.3
    CVE-2025-58246

    WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. The WordPress Core security team is aware of the issue and is already working on a fix. This is a low-severity vulnerability. Contributor-lev…

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu Wolfi