Skip to content
OpenAdvisories
Medium WID-SEC-2025-2115 2 CVEs

WordPress Core: Mehrere Schwachstellen

Published Sep 23, 2025 · Updated Dec 21, 2025 · Revision 4 · de-DE

Vendor: Debian Product: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in WordPress Core ausnutzen, um Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.

Product

WordPress ist ein PHP basiertes Open Source Blog-System.

Vulnerabilities 2

  • Medium 5.9
    CVE-2025-58674

    WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored XSS. WordPress core security team is aware of the issue and working on a fix. This is low severity vulnerability that requires an att…

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu Wolfi
  • Medium 4.3
    CVE-2025-58246

    WordPress <= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in WordPress allows Retrieve Embedded Sensitive Data. The WordPress Core security team is aware of the issue and is already working on a fix. This is a low-severity vulnerability. Contributor-lev…

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu Wolfi

Revision history

  1. #4

    Neue Updates von Debian aufgenommen

  2. #3

    Neue Updates von Debian aufgenommen

  3. #2

    Neue Updates von Debian aufgenommen

  4. #1

    Initiale Fassung

References