Packages / Debian 12 (Bookworm) / web / wordpress

Package: wordpress (6.1.9+dfsg1-0+deb12u1)

Gestore di weblog

Other Packages Related to wordpress:

dep: [apache2]
Apache HTTP Server
dep: httpd
Package not available
dep: [libapache2-mod-php]
server-side, HTML-embedded scripting language (Apache 2 module) (default)
dep: [php]
server-side, HTML-embedded scripting language (default)
dep: [ca-certificates]
Common CA certificates
dep: [default-mysql-client]
MySQL database client binaries (metapackage)
dep: virtual-mysql-client
Package not available
dep: [php-gd]
GD module for PHP [default]
dep: [php-mysql]
MySQL module for PHP [default]
dep: php-mysqlnd
Package not available
dep: [libjs-cropper] (>= 1.2.2)
JavaScript image cropper UI
dep: [libjs-underscore] (>= 1.13.4~dfsg+~1.11.4)
JavaScript's functional programming helper library
dep: [php-getid3] (>= 1.9.22+dfsg)
scripts to extract information from multimedia files

rec: [wordpress-l10n]
gestore di weblog - file di lingua
rec: [wordpress-theme-twentytwentythree]
gestore di weblog - file del tema twentytwentythree

sug: [default-mysql-server]
MySQL database server binaries and system database setup (metapackage)
sug: virtual-mysql-server
Package not available
sug: [php-curl]
CURL module for PHP [default]
sug: [php-xml]
DOM, SimpleXML, WDDX, XML, and XSL module for PHP [default]
sug: [php-imagick]
Provides a wrapper to the ImageMagick library
sug: [php-mbstring]
MBSTRING module for PHP [default]
sug: [php-ssh2]
Bindings for the libssh2 library
sug: [php-zip]
Zip module for PHP [default]

Download wordpress

Architecture	Package size	Installed size	Files	Package
all	7.5 MiB	50 MiB	list of files	Download

Percorsi file del pacchetto (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) security main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 12 (Bookworm) nel browser Crea un'immagine che include wordpress

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
6.1.9+dfsg1-0+deb12u1	bookworm-security / main	all	Debian 12 security · main · amd64	7.5 MiB	50 MiB	pool/updates/main/w/wordpress/wordpress_6.1.9+dfsg1-0+deb12u1_all.deb
6.1.9+dfsg1-0+deb12u1	bookworm-security / main	all	Debian 12 security · main · arm64	7.5 MiB	50 MiB	pool/updates/main/w/wordpress/wordpress_6.1.9+dfsg1-0+deb12u1_all.deb

Field source: Debian 12 (Bookworm) security main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-66666] Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through	Medium(6.9)	Interessata Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12
[CVE-2026-87902] An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for bot	High(8.1) CISA KEV	Interessata Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12
[CVE-2026-93485] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through	High(7.1)	Interessata Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12
[CVE-2026-65640] WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript in use on the server	High(8.8)	Interessata Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12
[CVE-2026-64638] WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be esc	High(8.9)	Interessata Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata nvd · wordpress · debian · bookworm; nvd · wordpress · debian · 12
[CVE-2026-3906] WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1. The Notes feature (block-level collaboration annotations) was introduced in WordPress 6.9 to allow editorial comments	Medium(4.3)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 24, 2026, 12:37:17 AM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Non interessata nvd · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Non interessata nvd · wordpress · debian · bookworm
[CVE-2022-4973] wordpress: CVE-2022-4973	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 7:00:13 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.2+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.2+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2022-3590] wordpress: CVE-2022-3590	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:28:24 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Interessata dsa · wordpress · debian · bookworm
[CVE-2022-43497] wordpress: CVE-2022-43497	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:30:19 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.3+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.3+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2022-43500] wordpress: CVE-2022-43500	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:30:19 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.3+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.3+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2022-43504] wordpress: CVE-2022-43504	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:30:19 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.3+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `6.0.3+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2011-1762] wordpress: CVE-2011-1762	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:05:23 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `3.2.1+dfsg-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `3.2.1+dfsg-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12
[CVE-2022-21661] wordpress: CVE-2022-21661	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:24:09 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2022-21662] wordpress: CVE-2022-21662	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:24:09 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2022-21663] wordpress: CVE-2022-21663	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:24:09 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2022-21664] wordpress: CVE-2022-21664	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:24:09 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.3+dfsg1-1` dsa · wordpress · debian · bookworm
[CVE-2021-44223] wordpress: CVE-2021-44223	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:03:32 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.1+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.1+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12
[CVE-2021-39201] wordpress: CVE-2021-39201	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:01:56 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.1+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.1+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12
[CVE-2021-39200] wordpress: CVE-2021-39200	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 6:01:56 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.1+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.8.1+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12
[CVE-2021-29476] wordpress: CVE-2021-29476	Medium	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 5:56:12 PM UTC Dettagli (2) `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.5.3+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12 `6.1.9+dfsg1-0+deb12u1` · all · bookworm-security Corretta · Corretta: `5.5.3+dfsg1-1` dsa · wordpress · debian · bookworm; dsa · wordpress · debian · 12

[Altri risultati]

Ultima sincronizzazione: Oct 24, 2026, 4:33:45 AM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

6.1.9+dfsg1-0+deb12u1 / allOsservato Sep 1, 2026sha256 506283af0a61…85c54937Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 506283af0a6194efeb39f2fb19e6131d59142a20b81e280b8e9f331385c54937

Verifica download

printf '%s  %s\n' '506283af0a6194efeb39f2fb19e6131d59142a20b81e280b8e9f331385c54937' 'wordpress_6.1.9+dfsg1-0+deb12u1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main amd64

6.1.9+dfsg1-0+deb12u1 / allOsservato Sep 1, 2026sha256 506283af0a61…85c54937Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 506283af0a6194efeb39f2fb19e6131d59142a20b81e280b8e9f331385c54937

Verifica download

printf '%s  %s\n' '506283af0a6194efeb39f2fb19e6131d59142a20b81e280b8e9f331385c54937' 'wordpress_6.1.9+dfsg1-0+deb12u1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) security main arm64

Fonti

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified
Debian 12 (Bookworm) security main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Observed SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Result
match verified
Debian 12 (Bookworm) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Observed SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Result
match verified