FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

wordpress -- Multiple vulnerability

Affected packages
wordpress < 4.2.4,1
de-wordpress < 4.2.4
ja-wordpress < 4.2.4
ru-wordpress < 4.2.4
zh-wordpress-zh_CN < 4.2.4
zh-wordpress-zh_TW < 4.2.4

Details

VuXML ID ac5ec8e3-3c6c-11e5-b921-00a0986f28c4
Discovery 2015-08-04
Entry 2015-08-06
Modified 2015-09-15

Gary Pendergast reports:

WordPress 4.2.4 fixes three cross-site scripting vulnerabilities and a potential SQL injection that could be used to compromise a site.

References

CVE Name CVE-2015-2213
CVE Name CVE-2015-5730
CVE Name CVE-2015-5731
CVE Name CVE-2015-5732
CVE Name CVE-2015-5733
CVE Name CVE-2015-5734
URL https://wordpress.org/news/2015/08/wordpress-4-2-4-security-and-maintenance-release/