[CVE-2026-66666 ] Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data.
This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through
Medium(6.9) Affected Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Affected
nvd · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Affected
nvd · wordpress · debian · 13
[CVE-2026-87902 ] An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If relevant pre-conditions for bot
High(8.1) CISA KEV
Affected Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
[CVE-2026-93485 ] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic WordPress wordpress allows DOM-Based XSS.This issue affects WordPress: from n/a through
High(7.1) Affected Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
[CVE-2026-65640 ] WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher.
Prerequisites:
* Imagick and Ghostscript in use on the server
High(8.8) Affected Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Affected · Fixed: 6.8.10+dfsg1-0+deb13u1
nvd · wordpress · debian · 13
[CVE-2011-1762 ] wordpress: CVE-2011-1762
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:05:23 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 3.2.1+dfsg-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 3.2.1+dfsg-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 3.2.1+dfsg-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 3.2.1+dfsg-1
dsa · wordpress · debian · 13
[CVE-2021-44223 ] wordpress: CVE-2021-44223
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:03:32 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2021-39201 ] wordpress: CVE-2021-39201
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:56 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2021-39200 ] wordpress: CVE-2021-39200
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 6:01:56 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.8.1+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2021-29476 ] wordpress: CVE-2021-29476
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:56:12 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2021-29450 ] wordpress: CVE-2021-29450
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:56:12 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2021-29447 ] wordpress: CVE-2021-29447
Low Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:56:12 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.7.1+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28040 ] wordpress: CVE-2020-28040
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28039 ] wordpress: CVE-2020-28039
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28038 ] wordpress: CVE-2020-28038
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28037 ] wordpress: CVE-2020-28037
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28036 ] wordpress: CVE-2020-28036
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28035 ] wordpress: CVE-2020-28035
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28034 ] wordpress: CVE-2020-28034
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28033 ] wordpress: CVE-2020-28033
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
[CVE-2020-28032 ] wordpress: CVE-2020-28032
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:06 PM UTC
Details (4) 6.8.10+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.6+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security · Historical version
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13
6.8.7+dfsg1-0+deb13u1 · all · trixie-security
Fixed · Fixed: 5.5.3+dfsg1-1
dsa · wordpress · debian · 13