Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/wordpress@6.8.3%2Bdfsg1-0%2Bdeb13u1
purl pkg:deb/debian/wordpress@6.8.3%2Bdfsg1-0%2Bdeb13u1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-gyaq-8pvh-p7gg WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values by leveraging access to the hash values. NOTE: the approach to changing this may not be fully compatible with certain use cases, such as migration of a WordPress site from a web host that uses a recent PHP version to a different web host that uses PHP 5.2. These use cases are plausible (but very unlikely) based on statistics showing widespread deployment of WordPress with obsolete PHP versions. CVE-2012-6707
VCID-jghn-eujf-zbdn WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink function. This can allow unauthenticated attackers to expose the slug of a custom post whose 'publicly_queryable' post status has been set to 'false'. CVE-2023-5692

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:33:26.546642+00:00 Debian Importer Fixing VCID-gyaq-8pvh-p7gg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:41:48.465935+00:00 Debian Importer Fixing VCID-jghn-eujf-zbdn https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:36:00.693629+00:00 Debian Importer Fixing VCID-gyaq-8pvh-p7gg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:26:58.726062+00:00 Debian Importer Fixing VCID-jghn-eujf-zbdn https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-08T19:43:38.330284+00:00 Debian Importer Fixing VCID-gyaq-8pvh-p7gg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-04T18:10:06.383809+00:00 Debian Importer Fixing VCID-jghn-eujf-zbdn https://security-tracker.debian.org/tracker/data/json 38.1.0