Debian Wordpress vulnerabilities

CVE-2019-20043 [MEDIUM] CVE-2019-20043: wordpress - In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordP... In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to mark posts as sticky or unsticky via the REST API. For example, the contributor role does not have such rights, but this allowed them to bypass that. This has been patched in WordPress 5.3

CVE-2006-6016 [MEDIUM] CVE-2006-6016: wordpress - wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated use... wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary user via a modified user_id parameter. Scope: local bookworm: resolved (fixed in 2.0.5-0.1) bullseye: resolved (fixed in 2.0.5-0.1) forky: resolved (fixed in 2.0.5-0.1) sid: resolved (fixed in 2.0.5-0.1) trixie: resolved (fixed in 2.0.5-0.1)

CVE-2015-5732 [MEDIUM] CVE-2015-5732: wordpress - Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu... Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title. Scope: local bookworm: resolved (fixed in 4.2.4+dfsg-1) bullseye: resolved (fixed in 4.2.4+dfsg-1) forky: resolved (fixed in 4.2

CVE-2015-5734 [MEDIUM] CVE-2015-5734: wordpress - Cross-site scripting (XSS) vulnerability in the legacy theme preview implementat... Cross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp-includes/theme.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a crafted string. Scope: local bookworm: resolved (fixed in 4.2.4+dfsg-1) bullseye: resolved (fixed in 4.2.4+dfsg-1) forky: resolved (fixed in 4.2.4+dfsg-1) sid: re

CVE-2026-3906 [MEDIUM] CVE-2026-3906: wordpress - WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.... WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1. The Notes feature (block-level collaboration annotations) was introduced in WordPress 6.9 to allow editorial comments directly on posts in the block editor. However, the REST API `create_item_permissions_check()` method in the comments controller did not verify that the authenticate

CVE-2017-5488 [MEDIUM] CVE-2017-5488: wordpress - Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php ... Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) version header of a plugin. Scope: local bookworm: resolved (fixed in 4.7.1+dfsg-1) bullseye: resolved (fixed in 4.7.1+dfsg-1) forky: resolved (fixed in 4.7.1+dfsg-1) sid: re

CVE-2014-9031 [MEDIUM] CVE-2014-9031: wordpress - Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPres... Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text field, as demonstrated by a comment or a post. Scope: local bookworm: resolved (fixed in 4.0.1+dfsg-1) bullseye: res

CVE-2007-0541 [MEDIUM] CVE-2007-0541: wordpress - WordPress allows remote attackers to determine the existence of arbitrary files,... WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback service calls with a source URI that corresponds to a local pathname, which triggers different fault codes for existing and non-existing files, and in certain configurations causes a brief file excerpt to be published as a blog

CVE-2012-3385 [MEDIUM] CVE-2012-3385: wordpress - WordPress before 3.4.1 does not properly restrict access to post contents such a... WordPress before 3.4.1 does not properly restrict access to post contents such as private or draft posts, which allows remote authors or contributors to obtain sensitive information via unknown vectors. Scope: local bookworm: resolved (fixed in 3.4.1+dfsg-1) bullseye: resolved (fixed in 3.4.1+dfsg-1) forky: resolved (fixed in 3.4.1+dfsg-1) sid: resolved (fixed in

CVE-2023-39999 [MEDIUM] CVE-2023-39999: wordpress - Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3... Exposure of Sensitive Information to an Unauthorized Actor in WordPress from 6.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.13, from 6.0 through 6.0.5, from 5.9 through 5.9.7, from 5.8 through 5.8.7, from 5.7 through 5.7.9, from 5.6 through 5.6.11, from 5.5 through 5.5.12, from 5.4 through 5.4.13, from 5.3 through 5.3.15, from 5.2 through 5.2.18,

CVE-2006-2702 [MEDIUM] CVE-2006-2702: wordpress - vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote at... vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR']. Scope: local bookworm: resolved (fixed in 2.0.3-1) bullseye: resolved (fixed in 2.0.3-1) forky: resolved (fixed in 2.0.3-1) sid: resolved (fixed in 2.0.3-1) trix

CVE-2008-1502 [MEDIUM] CVE-2008-1502: wordpress - The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as u... The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols. Scope: local bookworm: resolved (fixed in 2.5.0-1) bullseye: resolve

CVE-2013-2173 [MEDIUM] CVE-2013-2173: wordpress - wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post ... wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-postpass cookie. Scope: local bookworm: resolved (fixed in 3.5.2+dfsg-1) bullseye: resolved (fixed in 3.5.2+dfsg-1) forky: resolved (fixed in 3.5.2+dfsg-1) sid: resolved (

CVE-2016-9263 [MEDIUM] CVE-2016-9263: wordpress - WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is n... WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection (XSF) attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file. Scope: local bookworm: resolved (fixed in 4.1+dfsg-1) bullseye: resolved (fixed in 4.1+dfsg-1) forky: r

CVE-2014-9039 [MEDIUM] CVE-2014-9039: wordpress - wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, ... wp-login.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 might allow remote attackers to reset passwords by leveraging access to an e-mail account that received a password-reset message. Scope: local bookworm: resolved (fixed in 4.0.1+dfsg-1) bullseye: resolved (fixed in 4.0.1+dfsg-1) forky: resolved (fixed in 4.0.1+dfsg

CVE-2007-3238 [MEDIUM] CVE-2007-3238: wordpress - Cross-site scripting (XSS) vulnerability in functions.php in the default theme i... Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI) to wp-admin/themes.php, a different vulnerability than CVE-2007-1622. NOTE: this might not cross privilege boundaries in some configurations, since the Admi

CVE-2016-10148 [MEDIUM] CVE-2016-10148: wordpress - The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in Word... The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_data call before checking the update_plugins capability, which allows remote authenticated users to bypass intended read-access restrictions via the plugin parameter to wp-admin/admin-ajax.php, a related issue to CVE-2016-6896. Scope: local bookwor

CVE-2013-2199 [MEDIUM] CVE-2013-2199: wordpress - The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requ... The HTTP API in WordPress before 3.5.2 allows remote attackers to send HTTP requests to intranet servers via unspecified vectors, related to a Server-Side Request Forgery (SSRF) issue, a similar vulnerability to CVE-2013-0235. Scope: local bookworm: resolved (fixed in 3.5.2+dfsg-1) bullseye: resolved (fixed in 3.5.2+dfsg-1) forky: resolved (fixed in 3.5.2+dfsg-1)

CVE-2006-0986 [MEDIUM] CVE-2006-0986: wordpress - WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive informat... WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-filters.php, (2) template-loader.php, (3) rss-functions.php, (4) locale.php, (5) wp-db.php, and (6) kses.php in the wp-includes/ directory; and (7) edit-form-advanced.php, (8) admin-functions.php, (9) edit-link-form.php, (10) edit-page-form.php,

CVE-2011-3127 [MEDIUM] CVE-2011-3127: wordpress - WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for ... WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site. Scope: local bookworm: resolved (fixed in 3.2.1+dfsg-1) bullseye: resolved (fixed in 3.2.1+dfsg-1) forky: resol