Debian Wordpress vulnerabilities

CVE-2017-6816 [MEDIUM] CVE-2017-6816: wordpress - In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be delete... In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality. Scope: local bookworm: resolved (fixed in 4.7.3+dfsg-1) bullseye: resolved (fixed in 4.7.3+dfsg-1) forky: resolved (fixed in 4.7.3+dfsg-1) sid: resolved (fixed in 4.7.3+dfsg-1) trixie: resolved (fixed in 4.7.3+dfsg-1)

CVE-2020-25286 [MEDIUM] CVE-2020-25286: wordpress - In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a p... In wp-includes/comment-template.php in WordPress before 5.4.2, comments from a post or page could sometimes be seen in the latest comments even if the post or page was not public. Scope: local bookworm: resolved (fixed in 5.4.2+dfsg1-1) bullseye: resolved (fixed in 5.4.2+dfsg1-1) forky: resolved (fixed in 5.4.2+dfsg1-1) sid: resolved (fixed in 5.4.2+dfsg1-1) tri

CVE-2021-39201 [HIGH] CVE-2021-39201: wordpress - WordPress is a free and open-source content management system written in PHP and... WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. ### Impact The issue allows an authenticated but low-privileged user (like contributor/author) to execute XSS in the editor. This bypasses the restrictions imposed on users who do not have the permission to post `unfiltered_html`. ### Patches T

CVE-2023-5692 [MEDIUM] CVE-2023-5692: wordpress - WordPress Core is vulnerable to Sensitive Information Exposure in versions up to... WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post status has been set to 'false'. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 6.5+df

CVE-2018-10102 [MEDIUM] CVE-2018-10102: wordpress - Before WordPress 4.9.5, the version string was not escaped in the get_the_genera... Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag. Scope: local bookworm: resolved (fixed in 4.9.5+dfsg1-1) bullseye: resolved (fixed in 4.9.5+dfsg1-1) forky: resolved (fixed in 4.9.5+dfsg1-1) sid: resolved (fixed in 4.9.5+dfsg1-1) trixie: resolved (fixed in 4.9.5+dfsg1-1)

CVE-2013-2202 [MEDIUM] CVE-2013-2202: wordpress - WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oE... WordPress before 3.5.2 allows remote attackers to read arbitrary files via an oEmbed XML provider response containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Scope: local bookworm: resolved (fixed in 3.5.2+dfsg-1) bullseye: resolved (fixed in 3.5.2+dfsg-1) forky: resolved (fixed in 3.5.

CVE-2006-5705 [MEDIUM] CVE-2006-5705: wordpress - Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in Word... Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request. Scope: local bookworm: resolved (fixed in 2.0.5-0.1) bullseye: resolved (fixed in 2.0.5-0.1) forky:

CVE-2017-6815 [MEDIUM] CVE-2017-6815: wordpress - In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can tr... In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation. Scope: local bookworm: resolved (fixed in 4.7.3+dfsg-1) bullseye: resolved (fixed in 4.7.3+dfsg-1) forky: resolved (fixed in 4.7.3+dfsg-1) sid: resolved (fixed in 4.7.3+dfsg-1) trixie: resolved (fixed in 4.7.3+dfsg-1)

CVE-2015-5623 [MEDIUM] CVE-2015-5623: wordpress - WordPress before 4.2.3 does not properly verify the edit_posts capability, which... WordPress before 4.2.3 does not properly verify the edit_posts capability, which allows remote authenticated users to bypass intended access restrictions and create drafts by leveraging the Subscriber role, as demonstrated by a post-quickdraft-save action to wp-admin/post.php. Scope: local bookworm: resolved (fixed in 4.2.3+dfsg-1) bullseye: resolved (fixed in 4.2

CVE-2019-16222 [MEDIUM] CVE-2019-16222: wordpress - WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protoco... WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks. Scope: local bookworm: resolved (fixed in 5.2.3+dfsg1-1) bullseye: resolved (fixed in 5.2.3+dfsg1-1) forky: resolved (fixed in 5.2.3+dfsg1-1) sid: resolved (fixed in 5.2.3+dfsg1-1) trixie: resolved (f

CVE-2020-11030 [MEDIUM] CVE-2020-11030: wordpress - In affected versions of WordPress, a special payload can be crafted that can lea... In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the block editor. This requires an authenticated user with the ability to add content. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9

CVE-2016-5834 [MEDIUM] CVE-2016-5834: wordpress - Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function ... Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833. Scope: local bookworm: resolved (fixed in 4.5.3+dfsg-1) bullseye: resolved (fixed in 4.

CVE-2007-0539 [HIGH] CVE-2007-0539: wordpress - The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to ... The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint. Scope: local bookworm: resolved (fixed in 2.1.0-1) bullseye: resolved (fixed in

CVE-2007-3544 [MEDIUM] CVE-2007-3544: wordpress - Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in Word... Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors, possibly related to the wp_postmeta table and the use of custom fields in normal (non-attachment) posts. NOTE: this issue reportedly exists because of

CVE-2017-6814 [MEDIUM] CVE-2017-6814: wordpress - In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via... In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstrated by both (1) mishandling of the playlist shortcode in the wp_playlist_shortcode function in wp-includes/media.php and (2) mishandling of meta information in the renderTracks function in wp-includes/js/mediaelement/wp-playlist.js. Scope: local b

CVE-2012-2402 [MEDIUM] CVE-2012-2402: wordpress - wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site ... wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors. Scope: local bookworm: resolved (fixed in 3.3.2+dfsg-1) bullseye: resolved (fixed in 3.3.2+dfsg-1) forky: resolved (fixed in 3.3.2+dfsg-1) sid: resolved (fixed in 3.3.2+df

CVE-2022-43500 [MEDIUM] CVE-2022-43500: wordpress - Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a... Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7. Scope: local bookworm: resolved (fixed in 6.0.3+dfsg1-1) bullseye: resolved (fixed in 5.7.8+dfsg1-0+deb11u1) forky: resolved (fixed in 6.0.3+df

CVE-2019-16781 [MEDIUM] CVE-2019-16781: wordpress - In WordPress before 5.3.1, authenticated users with lower privileges (like contr... In WordPress before 5.3.1, authenticated users with lower privileges (like contributors) can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admin opening the affected post in the editor leading to XSS. Scope: local bookworm: resolved (fixed in 5.3.2+dfsg1-1) bullseye: resolved (fixed in 5.3.2+dfsg1-1) forky:

CVE-2020-11025 [MEDIUM] CVE-2020-11025: wordpress - In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in... In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4

CVE-2019-17674 [MEDIUM] CVE-2019-17674: wordpress - WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via th... WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer. Scope: local bookworm: resolved (fixed in 5.2.4+dfsg1-1) bullseye: resolved (fixed in 5.2.4+dfsg1-1) forky: resolved (fixed in 5.2.4+dfsg1-1) sid: resolved (fixed in 5.2.4+dfsg1-1) trixie: resolved (fixed in 5.2.4+dfsg1-1)