Debian/wordpress: unknown

Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote a

Action: Upgrade wordpress to 2.1.1-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-1049#Debian:14/wordpress
• https://security-tracker.debian.org/tracker/CVE-2007-1049

published 2007-02-21T17:28:00Z · modified 2026-10-21T17:47:48.297069721Z · JSON