Known vulnerabilities in wordpress (Debian package) 4.1+dfsg-1

Vendor: Debian
Version: 4.1+dfsg-1
Software CPE: cpe:2.3:o:debian:wordpress_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 31
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting wordpress (Debian package) version 4.1+dfsg-1 wordpress (Debian package) 4.1+dfsg-1 is affected by 31 vulnerabilities: 1 high, 7 medium, 23 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27443 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11026
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11025
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27438 - Weak password recovery mechanism
CVE-2020-11027
CWE-640 High
Public exploit available
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU24143 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16780
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 08.01.2020 SB2019121301
SB2020010818
SB2020050617
#VU23945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20041
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 06.01.2020 SB2019121301
SB2020010818
SB2020050617
#VU23576 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16781
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 13.12.2019 SB2019121301
SB2020010818
SB2020050617
#VU23575 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20042
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 13.12.2019 SB2019121301
SB2020010818
SB2020050617
#VU23574 - Improper Access Control
CVE-2019-20043
CWE-284 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 13.12.2019 SB2019121301
SB2020010818
SB2020050617
#VU21791 - Improper input validation
CVE-2019-17675
CWE-20 Medium
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21790 - Improper input validation
CVE-2019-17673
CWE-20 Medium
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21789 - Improper Access Control
CVE-2019-17671
CWE-284 Medium
Public exploit available
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17672
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU21787 - Server-Side Request Forgery (SSRF)
CVE-2019-17669
CWE-918 Medium
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 15.10.2019 SB2019101505
SB2020010818
SB2020050617
#VU20887 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16222
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20886 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16221
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20885 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16219
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16217
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20883 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-16220
CWE-601 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20882 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16218
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16223
CWE-79 Low
Public exploit available
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617


Showing elements 1 - 20 out of 31