wordpress: multiple vulnerabilities [LWN.net]

Package(s):

wordpress

CVE #(s):

CVE-2012-2399 CVE-2012-2400 CVE-2012-2401 CVE-2012-2402 CVE-2012-2403 CVE-2012-2404

Created:

May 11, 2012

Updated:

May 16, 2012

Description:

From the Fedora advisory:

Bug #815384 - CVE-2012-2399 wordpress (X < 3.3.2): Unspecified vulnerability in SWFUpload https://bugzilla.redhat.com/show_bug.cgi?id=815384

Bug #815387 - CVE-2012-2400 wordpress (X < v3.3.2): Unspecified vulnerability in the SWFObject https://bugzilla.redhat.com/show_bug.cgi?id=815387

Bug #815388 - CVE-2012-2401 wordpress (X < v3.3.2): Plupload - Same origin policy bypass via crafted SWF content https://bugzilla.redhat.com/show_bug.cgi?id=815388

Bug #815389 - CVE-2012-2402 wordpress (X < v3.3.2): Remote authenticated site administrators able to deactivate network-wide plugins under certain circumstances https://bugzilla.redhat.com/show_bug.cgi?id=815389

Bug #815391 - CVE-2012-2403 wordpress (X < v3.3.2): XSS when making URLs clickable https://bugzilla.redhat.com/show_bug.cgi?id=815391

Bug #815392 - CVE-2012-2404 wordpress (X < v3.3.2): XSS in redirects after posting comments, and when filtering URLs https://bugzilla.redhat.com/show_bug.cgi?id=815392

Alerts:

Fedora	FEDORA-2012-6511	2012-05-11
Fedora	FEDORA-2012-6542	2012-05-11
Debian	DSA-2670-1	2012-05-11

(Log in to post comments)