Known vulnerabilities in wordpress (Debian package) - page 2

Vendor: Debian
Software CPE: cpe:2.3:o:debian:wordpress_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 74
Public exploits: 12
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting wordpress (Debian package) wordpress (Debian package) is affected by 74 known vulnerabilities: 1 critical, 9 high, 18 medium, 46 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48200 - Deserialization of Untrusted Data
CVE-2020-28032
CWE-502 High
Available
No
5.0.11+dfsg1-0+deb10u1 02.11.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU48201 - Permissions, Privileges, and Access Controls
CVE-2020-28033
CWE-264 Medium
No
No
5.0.11+dfsg1-0+deb10u1 02.11.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU48038 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28038
CWE-79 Low
Available
No
5.0.11+dfsg1-0+deb10u1 30.10.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU48037 - Resource Management Errors
CVE-2020-28037
CWE-399 High
No
No
5.0.11+dfsg1-0+deb10u1 30.10.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU48036 - Permissions, Privileges, and Access Controls
CVE-2020-28035
CWE-264 Medium
No
No
5.0.11+dfsg1-0+deb10u1 30.10.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU48035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28034
CWE-79 Medium
No
No
5.0.11+dfsg1-0+deb10u1 30.10.2020 SB2020103007
SB2020110901
SB2020110930
and 5 more
#VU29008 - Permissions, Privileges, and Access Controls
CVE-2020-4050
CWE-264 Low
No
No
5.0.10+dfsg1-0+deb10u1 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29007 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-4048
CWE-601 Low
No
No
5.0.10+dfsg1-0+deb10u1 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4049
CWE-79 Low
No
No
5.0.10+dfsg1-0+deb10u1 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4047
CWE-79 Low
No
No
5.0.10+dfsg1-0+deb10u1 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU29004 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4046
CWE-79 Low
No
No
5.0.10+dfsg1-0+deb10u1 12.06.2020 SB2020061210
SB2020062438
SB20200611184
and 3 more
#VU27443 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11026
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27442 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11029
CWE-79 Medium
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11030
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11025
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27439 - Improper Access Control
CVE-2020-11028
CWE-284 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU27438 - Weak password recovery mechanism
CVE-2020-11027
CWE-640 High
Available
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 29.04.2020 SB2020042920
SB2020050617
SB2020043039
and 1 more
#VU20884 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16217
CWE-79 Low
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU20881 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16223
CWE-79 Low
Available
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u1, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 05.09.2019 SB2019090504
SB2020010818
SB2020050617
#VU17981 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-9787
CWE-79 Medium
No
No
4.7.5+dfsg-2+deb9u6, 5.0.4+dfsg1-1+deb10u2, 5.4.1+dfsg1-1 13.03.2019 SB2019031311
SB2020050617


Showing elements 21 - 40 out of 74