tocsin

Debian/wordpress: critical 9.8

WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote attackers to execute arbitrary code via a supply-chain attack against WordPress installations that

Action: Upgrade wordpress to 5.8.1+dfsg1-1 or later.

Affected

introducedfixedlast affected
05.8.1+dfsg1-1-

Fixed versions

5.8.1+dfsg1-1

Sources

published · modified · JSON