CVE-2021-29504

Packagist/wp-cli/wp-cli CVE-2021-29504: critical 9.1

Improper Certificate Validation in WP-CLI framework

Action: Upgrade wp-cli/wp-cli to 2.5.0 or later.

composer require wp-cli/wp-cli:2.5.0

Affected

Fixed versions

Sources

• osv: GHSA-rwgm-f83r-v3qj
• https://github.com/wp-cli/wp-cli/security/advisories/GHSA-rwgm-f83r-v3qj
• https://nvd.nist.gov/vuln/detail/CVE-2021-29504
• https://github.com/wp-cli/checksum-command/pull/86
• https://github.com/wp-cli/config-command/pull/128
• https://github.com/wp-cli/core-command/pull/186
• https://github.com/wp-cli/extension-command/pull/287
• https://github.com/wp-cli/package-command/pull/138
• https://github.com/wp-cli/wp-cli/pull/5523
• https://github.com/FriendsOfPHP/security-advisories/blob/master/wp-cli/wp-cli/CVE-2021-29504.yaml

CVE-2021-29504 · published 2021-05-19T23:03:11Z · modified 2026-07-08T06:28:33.162076980Z · JSON