Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/wordpress@2.3.2?distro=trixie
Typedeb
Namespacedebian
Namewordpress
Version2.3.2
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.3.2-1
Latest_non_vulnerable_version6.9.4+dfsg1-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-3131-uvkj-vbb5
vulnerability_id VCID-3131-uvkj-vbb5
summary wp-admin/options.php in WordPress MU before 1.3.2, and WordPress 2.3.2 and earlier, does not properly validate requests to update an option, which allows remote authenticated users with manage_options and upload_files capabilities to execute arbitrary code by uploading a PHP script and adding this script's pathname to active_plugins.
references
0
reference_url http://mu.wordpress.org/forums/topic.php?id=7534&page&replies=1
reference_id
reference_type
scores
url http://mu.wordpress.org/forums/topic.php?id=7534&page&replies=1
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-5695
reference_id
reference_type
scores
0
value 0.16371
scoring_system epss
scoring_elements 0.94877
published_at 2026-04-21T12:55:00Z
1
value 0.16371
scoring_system epss
scoring_elements 0.94826
published_at 2026-04-01T12:55:00Z
2
value 0.16371
scoring_system epss
scoring_elements 0.94835
published_at 2026-04-02T12:55:00Z
3
value 0.16371
scoring_system epss
scoring_elements 0.94838
published_at 2026-04-04T12:55:00Z
4
value 0.16371
scoring_system epss
scoring_elements 0.94841
published_at 2026-04-07T12:55:00Z
5
value 0.16371
scoring_system epss
scoring_elements 0.9485
published_at 2026-04-08T12:55:00Z
6
value 0.16371
scoring_system epss
scoring_elements 0.94854
published_at 2026-04-09T12:55:00Z
7
value 0.16371
scoring_system epss
scoring_elements 0.94858
published_at 2026-04-11T12:55:00Z
8
value 0.16371
scoring_system epss
scoring_elements 0.94861
published_at 2026-04-12T12:55:00Z
9
value 0.16371
scoring_system epss
scoring_elements 0.94863
published_at 2026-04-13T12:55:00Z
10
value 0.16371
scoring_system epss
scoring_elements 0.9487
published_at 2026-04-16T12:55:00Z
11
value 0.16371
scoring_system epss
scoring_elements 0.94874
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-5695
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5695
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5695
3
reference_url http://secunia.com/advisories/28789
reference_id
reference_type
scores
url http://secunia.com/advisories/28789
4
reference_url http://securityreason.com/securityalert/4798
reference_id
reference_type
scores
url http://securityreason.com/securityalert/4798
5
reference_url https://www.exploit-db.com/exploits/5066
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/5066
6
reference_url http://www.buayacorp.com/files/wordpress/wp-blog-option-overwrite.txt
reference_id
reference_type
scores
url http://www.buayacorp.com/files/wordpress/wp-blog-option-overwrite.txt
7
reference_url http://www.securityfocus.com/bid/27633
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/27633
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510786
reference_id 510786
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510786
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-5695
reference_id CVE-2008-5695
reference_type
scores
0
value 8.5
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:C/I:C/A:C
url https://nvd.nist.gov/vuln/detail/CVE-2008-5695
12
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/5066.php
reference_id OSVDB-41134;CVE-2008-5695
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/5066.php
13
reference_url http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html
reference_id OSVDB-41134;CVE-2008-5695
reference_type exploit
scores
url http://www.buayacorp.com/files/wordpress/wordpress-mu-options-overwrite.html
fixed_packages
0
url pkg:deb/debian/wordpress@2.3.2?distro=trixie
purl pkg:deb/debian/wordpress@2.3.2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wordpress@2.3.2%3Fdistro=trixie
1
url pkg:deb/debian/wordpress@5.7.11%2Bdfsg1-0%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/wordpress@5.7.11%2Bdfsg1-0%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gyaq-8pvh-p7gg
1
vulnerability VCID-jghn-eujf-zbdn
2
vulnerability VCID-yqam-kpce-dfg7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wordpress@5.7.11%252Bdfsg1-0%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/wordpress@6.1.9%2Bdfsg1-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/wordpress@6.1.9%2Bdfsg1-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-gyaq-8pvh-p7gg
1
vulnerability VCID-jghn-eujf-zbdn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wordpress@6.1.9%252Bdfsg1-0%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/wordpress@6.8.3%2Bdfsg1-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/wordpress@6.8.3%2Bdfsg1-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wordpress@6.8.3%252Bdfsg1-0%252Bdeb13u1%3Fdistro=trixie
4
url pkg:deb/debian/wordpress@6.9.4%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/wordpress@6.9.4%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/wordpress@6.9.4%252Bdfsg1-1%3Fdistro=trixie
aliases CVE-2008-5695
risk_score 10.0
exploitability 2.0
weighted_severity 7.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3131-uvkj-vbb5
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/wordpress@2.3.2%3Fdistro=trixie