Skip to content
OpenAdvisories
Low WID-SEC-2023-2640 3 CVEs

WordPress: Mehrere Schwachstellen

Published Oct 12, 2023 · Updated May 9, 2024 · Revision 6 · de-DE

Vendor: Debian Vendor: Fedora Product: Linux Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder einen Cross-Site-Script-Angriff durchzuführen.

Product

WordPress ist ein PHP basiertes Open Source Blog-System.

Vulnerabilities 3

  • Medium 6.5
    CVE-2023-38000

    Auth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block

    Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions.

    WordPress Gutenberg Team WordPress Gutenberg Web / CMS Debian Ubuntu
  • Medium 5.3
    CVE-2023-5561 Public exploit Scanner template

    WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure

    WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  • Medium 4.3
    CVE-2023-39999

    WordPress < 6.3.2 is vulnerable to Broken Access Control

    Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6…

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu

Revision history

  1. #6

    Neue Updates von Debian aufgenommen

  2. #5

    Neue Updates von Debian aufgenommen

  3. #4

    CVE ergänzt

  4. #3

    CVE ergänzt

  5. #2

    Neue Updates von Fedora aufgenommen

  6. #1

    Initiale Fassung

References