Search for packages
| purl | pkg:deb/debian/wordpress@4.7.2%2Bdfsg-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3f5q-3k4x-aue9 | The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identifier, which allows remote attackers to modify arbitrary pages via a request for wp-json/wp/v2/posts followed by a numeric value and a non-numeric value, as demonstrated by the wp-json/wp/v2/posts/123?id=123helloworld URI. |
CVE-2017-1001000
|
| VCID-46dk-a282-8bf9 | security update |
CVE-2017-5612
|
| VCID-tf2e-bgq5-9ff5 | security update |
CVE-2017-5611
|
| VCID-vg54-wjcw-fuh4 | security update |
CVE-2017-5610
|