Search for packages
| purl | pkg:deb/debian/wordpress@3.5.1%2Bdfsg-2?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-fqna-8mh3-rkd8 | Cross-site request forgery (CSRF) vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboard_incoming_links edit action. |
CVE-2012-4448
|
| VCID-qjdf-s39r-5bdb | PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string. |
CVE-2012-6112
GHSA-fx5h-3786-h2w6 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:18:23.489751+00:00 | Debian Importer | Fixing | VCID-qjdf-s39r-5bdb | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T10:36:35.931256+00:00 | Debian Importer | Fixing | VCID-fqna-8mh3-rkd8 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:25:02.158879+00:00 | Debian Importer | Fixing | VCID-qjdf-s39r-5bdb | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T07:10:12.684066+00:00 | Debian Importer | Fixing | VCID-fqna-8mh3-rkd8 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:57:51.837008+00:00 | Debian Importer | Fixing | VCID-qjdf-s39r-5bdb | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:57:51.776033+00:00 | Debian Importer | Fixing | VCID-fqna-8mh3-rkd8 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |