Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DSA-4250-1:5E0C5
HistoryJul 18, 2018 - 7:47 a.m.

[SECURITY] [DSA 4250-1] wordpress security update

2018-07-1807:47:25
lists.debian.org
20

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.535 Medium

EPSS

Percentile

97.6%

JSON

Debian Security Advisory DSA-4250-1 [email protected]
https://www.debian.org/security/ Sebastien Delafond
July 18, 2018 https://www.debian.org/security/faq

Package : wordpress
CVE ID : CVE-2018-12895
Debian Bug : 902876

A vulnerability was discovered in Wordpress, a web blogging tool. It
allowed remote attackers with specific roles to execute arbitrary
code.

For the stable distribution (stretch), this problem has been fixed in
version 4.7.5+dfsg-2+deb9u4.

We recommend that you upgrade your wordpress packages.

For the detailed security status of wordpress please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/wordpress

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9allwordpress-theme-twentysixteen< 4.7.5+dfsg-2+deb9u4wordpress-theme-twentysixteen_4.7.5+dfsg-2+deb9u4_all.deb
Debian8allwordpress-theme-twentyfourteen< 4.1+dfsg-1+deb8u18wordpress-theme-twentyfourteen_4.1+dfsg-1+deb8u18_all.deb
Debian8allwordpress< 4.1+dfsg-1+deb8u18wordpress_4.1+dfsg-1+deb8u18_all.deb
Debian9allwordpress-theme-twentyfifteen< 4.7.5+dfsg-2+deb9u4wordpress-theme-twentyfifteen_4.7.5+dfsg-2+deb9u4_all.deb
Debian9allwordpress-l10n< 4.7.5+dfsg-2+deb9u4wordpress-l10n_4.7.5+dfsg-2+deb9u4_all.deb
Debian8allwordpress-l10n< 4.1+dfsg-1+deb8u18wordpress-l10n_4.1+dfsg-1+deb8u18_all.deb
Debian8allwordpress-theme-twentythirteen< 4.1+dfsg-1+deb8u18wordpress-theme-twentythirteen_4.1+dfsg-1+deb8u18_all.deb
Debian9allwordpress< 4.7.5+dfsg-2+deb9u4wordpress_4.7.5+dfsg-2+deb9u4_all.deb
Debian9allwordpress-theme-twentyseventeen< 4.7.5+dfsg-2+deb9u4wordpress-theme-twentyseventeen_4.7.5+dfsg-2+deb9u4_all.deb
Debian8allwordpress-theme-twentyfifteen< 4.1+dfsg-1+deb8u18wordpress-theme-twentyfifteen_4.1+dfsg-1+deb8u18_all.deb

Related

veracode 1
openvas 8
zdt 1
fedora 4
ubuntucve 1
osv 3
cve 1
debiancve 1
nvd 1
packetstorm 1
debian 2
nessus 5
cvelist 1
wpvulndb 1
patchstack 1
prion 1
exploitdb 1
veracode
veracode
Arbitrary File Deletion
2018-06-27 05:49:00
openvas
openvas
WordPress Arbitrary File Deletion Vulnerability (Jun 2018) - Windows
2018-06-27 00:00:00
WordPress Arbitrary File Deletion Vulnerability (Jun 2018) - Linux
2018-06-27 00:00:00
Fedora Update for wordpress FEDORA-2018-8fc2cb8cb0
2018-07-15 00:00:00
zdt
zdt
Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) Exploit
2021-10-25 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: wordpress-4.9.7-1.fc27
2018-07-14 23:36:51
[SECURITY] Fedora 28 Update: wordpress-4.9.7-1.fc28
2018-07-15 03:34:16
[SECURITY] Fedora 28 Update: wordpress-5.1.1-1.fc28
2019-03-21 21:09:38
ubuntucve
ubuntucve
CVE-2018-12895
2018-06-26 00:00:00
osv
osv
wordpress - security update
2018-07-18 00:00:00
CVE-2018-12895
2018-06-26 20:29:00
wordpress - security update
2018-07-30 00:00:00
cve
cve
CVE-2018-12895
2018-06-26 20:29:00
debiancve
debiancve
CVE-2018-12895
2018-06-26 20:29:00
nvd
nvd
CVE-2018-12895
2018-06-26 20:29:00
packetstorm
packetstorm
WordPress 4.9.6 Arbitrary File Deletion
2021-10-25 00:00:00
debian
debian
[SECURITY] [DSA 4250-1] wordpress security update
2018-07-18 07:47:25
[SECURITY] [DLA 1452-1] wordpress security update
2018-07-30 00:19:27
nessus
nessus
Debian DSA-4250-1 : wordpress - security update
2018-07-20 00:00:00
Fedora 28 : wordpress (2018-623df1e98d)
2019-01-03 00:00:00
Fedora 27 : wordpress (2018-8fc2cb8cb0)
2018-07-24 00:00:00
cvelist
cvelist
CVE-2018-12895
2018-06-26 20:00:00
wpvulndb
wpvulndb
WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion
2018-06-27 00:00:00
patchstack
patchstack
WordPress <=4.9.6 - Arbitrary Code Execution vulnerability
2018-06-27 00:00:00
prion
prion
Directory traversal
2018-06-26 20:29:00
exploitdb
exploitdb
Wordpress 4.9.6 - Arbitrary File Deletion (Authenticated) (2)
2021-10-25 00:00:00

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.535 Medium

EPSS

Percentile

97.6%

JSON
Related for DEBIAN:DSA-4250-1:5E0C5
veracode1openvas8zdt1fedora4ubuntucve1osv3cve1debiancve1nvd1packetstorm1debian2nessus5cvelist1wpvulndb1patchstack1prion1exploitdb1