Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/wordpress@3.4%2Bdfsg-1?distro=trixie |
| Type | deb |
| Namespace | debian |
| Name | wordpress |
| Version | 3.4+dfsg-1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 3.4.1+dfsg-1 |
| Latest_non_vulnerable_version | 6.9.4+dfsg1-1 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-8hdt-8gc7-4kgg |
| vulnerability_id |
VCID-8hdt-8gc7-4kgg |
| summary |
wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-6634 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.7412 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74126 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74152 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74123 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74156 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74171 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74192 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74174 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74168 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74205 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74215 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00807 |
| scoring_system |
epss |
| scoring_elements |
0.74206 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-6634 |
|
| 1 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-6634
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8hdt-8gc7-4kgg |
|
| 1 |
| url |
VCID-bj42-unmz-w3ht |
| vulnerability_id |
VCID-bj42-unmz-w3ht |
| summary |
Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-6633 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60081 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60159 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60184 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60153 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60203 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60217 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60238 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60225 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60207 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60247 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60254 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00392 |
| scoring_system |
epss |
| scoring_elements |
0.60241 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-6633 |
|
| 1 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-6633
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bj42-unmz-w3ht |
|
| 2 |
| url |
VCID-znav-bux7-7qd2 |
| vulnerability_id |
VCID-znav-bux7-7qd2 |
| summary |
wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2012-6635 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71678 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71684 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71702 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71675 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71713 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71725 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71749 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71732 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71715 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71758 |
| published_at |
2026-04-16T12:55:00Z |
|
| 10 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71764 |
| published_at |
2026-04-18T12:55:00Z |
|
| 11 |
| value |
0.00688 |
| scoring_system |
epss |
| scoring_elements |
0.71746 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2012-6635 |
|
| 1 |
|
|
| fixed_packages |
|
| aliases |
CVE-2012-6635
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-znav-bux7-7qd2 |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/wordpress@3.4%252Bdfsg-1%3Fdistro=trixie |