DSA-5039: -1 wordpress -- security update

Published Jan 11, 2022

Updated

Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform SQL injection, run unchecked SQL queries, bypass hardening, or perform Cross-Site Scripting (XSS) attacks.

Affected Software

2 affected components

debian/wordpress

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress to a version that resolves this vulnerability.
Patch DSA-5039-1

Event History

Jan 11, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

What types of attacks are addressed by this update?

The update addresses SQL injection, unchecked SQL query execution, hardening bypass, and cross-site scripting (XSS) vulnerabilities. The listed weakness categories are XSS and SQL injection.

Can these issues be exploited remotely?

Yes. The advisory states that remote attackers could exploit the vulnerabilities.

Which tracked CVEs are associated with this advisory?

The provided references include CVE-2022-21661 and CVE-2022-21662.

DSA-5039: -1 wordpress -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What types of attacks are addressed by this update?

Can these issues be exploited remotely?

Which tracked CVEs are associated with this advisory?

Company

Resources

Contact

Frequently Asked Questions

What types of attacks are addressed by this update?

Can these issues be exploited remotely?

Which tracked CVEs are associated with this advisory?