Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-5039-1:9B256
HistoryJan 11, 2022 - 10:13 a.m.

[SECURITY] [DSA 5039-1] wordpress security update

2022-01-1110:13:25
lists.debian.org
26
wordpress
sql injection
cross-site scripting
debian
update

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

Low

EPSS

0.915

Percentile

99.0%

JSON

Debian Security Advisory DSA-5039-1 [email protected]
https://www.debian.org/security/ Sebastien Delafond
January 11, 2022 https://www.debian.org/security/faq

Package : wordpress
CVE ID : CVE-2022-21661 CVE-2022-21662 CVE-2022-21663 CVE-2022-21664
Debian Bug : 1003243

Several vulnerabilities were discovered in Wordpress, a web blogging
tool. They allowed remote attackers to perform SQL injection, run
unchecked SQL queries, bypass hardening, or perform Cross-Site
Scripting (XSS) attacks.

For the oldstable distribution (buster), these problems have been fixed
in version 5.0.15+dfsg1-0+deb10u1.

For the stable distribution (bullseye), these problems have been fixed in
version 5.7.5+dfsg1-0+deb11u1.

We recommend that you upgrade your wordpress packages.

For the detailed security status of wordpress please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/wordpress

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian11allwordpress-theme-twentytwenty< 5.7.5+dfsg1-0+deb11u1wordpress-theme-twentytwenty_5.7.5+dfsg1-0+deb11u1_all.deb
Debian11allwordpress-l10n< 5.7.5+dfsg1-0+deb11u1wordpress-l10n_5.7.5+dfsg1-0+deb11u1_all.deb
Debian10allwordpress-theme-twentynineteen< 5.0.15+dfsg1-0+deb10u1wordpress-theme-twentynineteen_5.0.15+dfsg1-0+deb10u1_all.deb
Debian9allwordpress-l10n< 4.7.22+dfsg-0+deb9u1wordpress-l10n_4.7.22+dfsg-0+deb9u1_all.deb
Debian9allwordpress-theme-twentyseventeen< 4.7.22+dfsg-0+deb9u1wordpress-theme-twentyseventeen_4.7.22+dfsg-0+deb9u1_all.deb
Debian9allwordpress-theme-twentyfifteen< 4.7.22+dfsg-0+deb9u1wordpress-theme-twentyfifteen_4.7.22+dfsg-0+deb9u1_all.deb
Debian9allwordpress-theme-twentysixteen< 4.7.22+dfsg-0+deb9u1wordpress-theme-twentysixteen_4.7.22+dfsg-0+deb9u1_all.deb
Debian10allwordpress-theme-twentyseventeen< 5.0.15+dfsg1-0+deb10u1wordpress-theme-twentyseventeen_5.0.15+dfsg1-0+deb10u1_all.deb
Debian11allwordpress-theme-twentytwentyone< 5.7.5+dfsg1-0+deb11u1wordpress-theme-twentytwentyone_5.7.5+dfsg1-0+deb11u1_all.deb
Debian10allwordpress-l10n< 5.0.15+dfsg1-0+deb10u1wordpress-l10n_5.0.15+dfsg1-0+deb10u1_all.deb
Rows per page:
1-10 of 151

Related

osv 14
openvas 6
hivepro 1
nessus 3
fedora 2
wordfence 1
debian 1
debiancve 4
nvd 4
wpvulndb 4
veracode 4
prion 4
ubuntucve 4
patchstack 4
sonarsource 2
cvelist 4
cve 4
checkpoint_advisories 2
cnvd 2
githubexploit 12
vulnrichment 1
attackerkb 1
packetstorm 1
exploitdb 1
zdt 1
zdi 1
nuclei 1
osv
osv
wordpress - security update
2022-01-11 00:00:00
wordpress - security update
2022-01-17 00:00:00
BIT-wordpress-multisite-2022-21663
2024-03-06 11:09:52
openvas
openvas
Debian: Security Advisory (DLA-2884-1)
2022-01-24 00:00:00
WordPress Multiple Vulnerabilities (Jan 2022) - Windows
2022-01-11 00:00:00
Debian: Security Advisory (DSA-5039-1)
2022-01-11 00:00:00
hivepro
hivepro
WordPress fixes multiple security vulnerabilities
2022-01-10 16:34:43
nessus
nessus
Debian DSA-5039-1 : wordpress - security update
2022-01-11 00:00:00
WordPress 5.8 < 5.8.3 / 5.7 < 5.7.5 / 5.6 < 5.6.7 / 5.5 < 5.5.8 / 5.4 < 5.4.9 / 5.3 < 5.3.11 / 5.2 < 5.2.14 / 5.1 < 5.1.12 / 5.0 < 5.0.15 / 4.9 < 4.9.19 / 4.8 < 4.8.18 / 4.7 < 4.7.22 / 4.6 < 4.6.22 / 4.5 < 4.5.25 / 4.4 < 4.4.26 / 4.3 < 4.3.27 / 4.2 < 4.2.31 / 4.1 < 4.1.34 / 4.0 < 4.0.34 / 3.9 < 3.9.35 / 3.8 < 3.8.37 / 3.7 < 3.7.37
2022-01-06 00:00:00
Debian DLA-2884-1 : wordpress - LTS security update
2022-01-23 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: wordpress-5.8.3-1.fc34
2022-01-16 00:58:17
[SECURITY] Fedora 35 Update: wordpress-5.8.3-1.fc35
2022-01-16 01:19:42
wordfence
wordfence
WordPress 5.8.3 Security Release
2022-01-09 00:37:45
debian
debian
[SECURITY] [DLA 2884-1] wordpress security update
2022-01-23 19:09:19
debiancve
debiancve
CVE-2022-21662
2022-01-06 23:15:08
CVE-2022-21663
2022-01-06 23:15:08
CVE-2022-21661
2022-01-06 23:15:07
nvd
nvd
CVE-2022-21663
2022-01-06 23:15:08
CVE-2022-21662
2022-01-06 23:15:08
CVE-2022-21664
2022-01-06 23:15:08
wpvulndb
wpvulndb
WordPress < 5.8.3 - Super Admin Object Injection in Multisites
2022-01-06 00:00:00
WordPress < 5.8.3 - Author+ Stored XSS via Post Slugs
2022-01-06 00:00:00
WordPress < 5.8.3 - SQL Injection via WP_Query
2022-01-06 00:00:00
veracode
veracode
Object Injection
2022-01-16 08:09:38
Cross-site Scripting (XSS)
2022-01-16 08:19:37
SQL Injection
2022-01-07 09:37:27
prion
prion
Double free
2022-01-06 23:15:00
Double free
2022-01-06 23:15:00
Double free
2022-01-06 23:15:00
ubuntucve
ubuntucve
CVE-2022-21663
2022-01-06 00:00:00
CVE-2022-21662
2022-01-06 00:00:00
CVE-2022-21661
2022-01-06 00:00:00
patchstack
patchstack
WordPress <= 5.8.2 - Authenticated Object Injection in Multisites
2022-01-06 00:00:00
WordPress <= 5.8.2 - SQL Injection (SQLi) vulnerability
2022-01-06 00:00:00
WordPress <= 5.8.2 - Stored Cross-Site Scripting (XSS) vulnerability
2022-01-06 00:00:00
sonarsource
sonarsource
WordPress < 5.8.3 - Object Injection Vulnerability
2022-02-08 00:00:00
WordPress 5.8.2 Stored XSS Vulnerability
2022-01-11 00:00:00
cvelist
cvelist
CVE-2022-21663 Authenticated Object Injection in Multisites in WordPress
2022-01-06 23:00:11
CVE-2022-21664 SQL injection in WordPress
2022-01-06 22:55:09
CVE-2022-21662 Stored XSS in WordPress
2022-01-06 23:05:10
cve
cve
CVE-2022-21663
2022-01-06 23:15:08
CVE-2022-21662
2022-01-06 23:15:08
CVE-2022-21661
2022-01-06 23:15:07
checkpoint_advisories
checkpoint_advisories
WordPress Core Cross-Site Scripting (CVE-2022-21662)
2022-11-17 00:00:00
WordPress WP_Query SQL Injection (CVE-2022-21661)
2022-02-21 00:00:00
cnvd
cnvd
WordPress Cross-Site Scripting Vulnerability (CNVD-2022-03210)
2022-01-08 00:00:00
WordPress WP_Query SQL Injection Vulnerability
2022-01-08 00:00:00
githubexploit
githubexploit
Exploit for SQL Injection in Wordpress
2023-01-13 13:31:34
Exploit for SQL Injection in Wordpress
2022-05-28 10:46:48
Exploit for SQL Injection in Wordpress
2022-01-18 01:05:04
vulnrichment
vulnrichment
CVE-2022-21661 SQL injection in WordPress
2022-01-06 22:50:11
attackerkb
attackerkb
CVE-2022-21662
2022-01-06 00:00:00
packetstorm
packetstorm
WordPress Core 5.8.2 SQL Injection
2022-01-13 00:00:00
exploitdb
exploitdb
WordPress Core 5.8.2 - &#039;WP_Query&#039; SQL Injection
2022-01-13 00:00:00
zdt
zdt
WordPress Core 5.8.2 - (WP_Query) SQL Injection Vulnerability
2022-01-13 00:00:00
zdi
zdi
WordPress Core WP_Query SQL Injection Information Disclosure Vulnerability
2022-01-10 00:00:00
nuclei
nuclei
WordPress <5.8.3 - SQL Injection
2023-03-24 14:34:38

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

Low

EPSS

0.915

Percentile

99.0%

JSON
Related for DEBIAN:DSA-5039-1:9B256
osv14openvas6hivepro1nessus3fedora2wordfence1debian1debiancve4nvd4wpvulndb4veracode4prion4ubuntucve4patchstack4sonarsource2cvelist4cve4checkpoint_advisories2cnvd2githubexploit12vulnrichment1attackerkb1packetstorm1exploitdb1zdt1zdi1nuclei1