Debian Wordpress vulnerabilities

CVE-2019-16217 [MEDIUM] CVE-2019-16217: wordpress - WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attach... WordPress before 5.2.3 allows XSS in media uploads because wp_ajax_upload_attachment is mishandled. Scope: local bookworm: resolved (fixed in 5.2.3+dfsg1-1) bullseye: resolved (fixed in 5.2.3+dfsg1-1) forky: resolved (fixed in 5.2.3+dfsg1-1) sid: resolved (fixed in 5.2.3+dfsg1-1) trixie: resolved (fixed in 5.2.3+dfsg1-1)

CVE-2012-2401 [MEDIUM] CVE-2012-2401: wordpress - Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3... Plupload before 1.5.4, as used in wp-includes/js/plupload/ in WordPress before 3.3.2 and other products, enables scripting regardless of the domain from which the SWF content was loaded, which allows remote attackers to bypass the Same Origin Policy via crafted content. Scope: local bookworm: resolved (fixed in 3.3.2+dfsg-1) bullseye: resolved (fixed in 3.3.2+dfsg

CVE-2017-6817 [MEDIUM] CVE-2017-6817: wordpress - In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-... In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds. Scope: local bookworm: resolved (fixed in 4.7.3+dfsg-1) bullseye: resolved (fixed in 4.7.3+dfsg-1) forky: resolved (fixed in 4.7.3+dfsg-1) sid: resolved (fixed in 4.7.3+dfsg-1) trixie: resolved (fixed in 4.7.3+dfsg-1)

CVE-2011-3128 [MEDIUM] CVE-2011-3128: wordpress - WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments a... WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php. Scope: local bookworm: resolved (fixed in 3.2.1+dfsg-1) bullseye: resolved (fixed in 3.2.1+dfsg-1) forky: resolved (fixed in 3.2.1+dfsg-1) sid: resolved (fixed in 3.2.1

CVE-2010-5296 [MEDIUM] CVE-2010-5296: wordpress - wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configu... wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows remote authenticated administrators to bypass intended access restrictions via a delete action. Scope: local bookworm: resolved (fixed in 3.0.2-1) bullseye: resolved (fixed in 3.0.2-1) f

CVE-2021-29450 [MEDIUM] CVE-2021-29450: wordpress - Wordpress is an open source CMS. One of the blocks in the WordPress editor can b... Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges. This has been patched in WordPress 5.7.1, along with the older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to re

CVE-2015-3438 [MEDIUM] CVE-2015-3438: wordpress - Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, w... Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment. Scope: local bookworm: resolved (fixed

CVE-2017-14724 [MEDIUM] CVE-2017-14724: wordpress - Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed... Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery. Scope: local bookworm: resolved (fixed in 4.8.2+dfsg-1) bullseye: resolved (fixed in 4.8.2+dfsg-1) forky: resolved (fixed in 4.8.2+dfsg-1) sid: resolved (fixed in 4.8.2+dfsg-1) trixie: resolved (fixed in 4.8.2+dfsg-1)

CVE-2019-16220 [MEDIUM] CVE-2019-16220: wordpress - In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_r... In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open redirect if a provided URL path does not start with a forward slash. Scope: local bookworm: resolved (fixed in 5.2.3+dfsg1-1) bullseye: resolved (fixed in 5.2.3+dfsg1-1) forky: resolved (fixed in 5.2.3+dfsg1-1) sid: resolved

CVE-2015-7989 [MEDIUM] CVE-2015-7989: wordpress - Cross-site scripting (XSS) vulnerability in the user list table in WordPress bef... Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714. Scope: local bookworm: resolved (fixed in 4.3.1+dfsg-1) bullseye: resolved (fixed in 4.3.1+dfsg-1) forky: resolved (fixed in 4.

CVE-2017-9063 [MEDIUM] CVE-2017-9063: wordpress - In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to... In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization session. Scope: local bookworm: resolved (fixed in 4.7.5+dfsg-1) bullseye: resolved (fixed in 4.7.5+dfsg-1) forky: resolved (fixed in 4.7.5+dfsg-1) sid: resolved (fixed in 4.7.5+dfsg-1) trixie: resolved (fixed in 4.7.5+dfsg-1)

CVE-2023-38000 [MEDIUM] CVE-2023-38000: wordpress - Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPres... Auth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin <= 16.8.0 versions. Scope: local bookworm: resolved (fixed in 6.1.6+dfsg1-0+deb12u1) bullseye: resolved forky: resolved (fixed in 6.3.2+dfsg1-

CVE-2009-3622 [MEDIUM] CVE-2009-3622: wordpress - Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8... Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service (CPU consumption and server hang) via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related to the mb_convert_encoding function in PHP. Scope: local bookworm: r

CVE-2015-3439 [MEDIUM] CVE-2015-3439: wordpress - Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupl... Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, allows remote attackers to execute same-origin JavaScript functions via the target parameter, as demonstrated by executing a certain click function, related to _init.as a

CVE-2011-4957 [MEDIUM] CVE-2011-4957: wordpress - The make_clickable function in wp-includes/formatting.php in WordPress before 3.... The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls. Scope: local bookworm: resolved (fixed in 3.2.1+dfsg-1) bullseye: resolved (

CVE-2017-17093 [MEDIUM] CVE-2017-17093: wordpress - wp-includes/general-template.php in WordPress before 4.9.1 does not properly res... wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via the language setting of a site. Scope: local bookworm: resolved (fixed in 4.9.1+dfsg-1) bullseye: resolved (fixed in 4.9.1+dfsg-1) forky: resolved (fixed in 4.9.1+dfsg-1) sid: resolved

CVE-2025-58674 [MEDIUM] CVE-2025-58674: wordpress - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored XSS. WordPress core security team is aware of the issue and working on a fix. This is low severity vulnerability that requires an attacker to have Author or higher user privileges to execute the attack vector.This issue affects WordPress:

CVE-2011-3126 [MEDIUM] CVE-2011-3126: wordpress - WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to dete... WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects. Scope: local bookworm: resolved (fixed in 3.2.1+dfsg-1) bullseye: resolved (fixed in 3.2.1+dfsg-1) forky: resolved (fixed in 3.2.1+dfsg-1) sid: resolved (fixed in 3.2.1+dfsg-1) trixie: resolved (fixed in 3.2.1+dfsg-1)

CVE-2007-0106 [MEDIUM] CVE-2007-0106: wordpress - Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPr... Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when WordPress generates a new link to verify the request. Scope: local bookwo

CVE-2013-2204 [MEDIUM] CVE-2013-2204: wordpress - moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in ... moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a # (pound sign) character during extraction of the QUERY_STRING, which allows remote attackers to pass arbitrary parameters to a Flash application, and conduct content-spoofing attacks, via a crafted string a