WordPress CVEs

Description

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.

Affected WordPress components

• WordPress core
  Confirmed match
  Version 3.0; Version 3.0.1; Version 3.0.2; Version 3.0.3; Version 3.0.4; Version 3.0.5; Version 3.0.6; Version 3.1; Version 3.1.1; Version 3.1.2; Version 3.1.3; Version 3.1.4; Version 3.2; Version 3.2.1; Version 3.3; Version 3.3.1; Version 3.3.2; Version 3.3.3; Version 3.4; Version 3.4.1; Version 3.4.2; Version 3.5; Version 3.5.1; Version 3.5.2; Version 3.6; Version 3.6.1; Version 3.7; Version 3.7.1; Version 3.7.2; Version 3.7.3; Version 3.7.4; Version 3.7.5; Version 3.7.6; Version 3.7.7; Version 3.7.8; Version 3.7.9; Version 3.7.10; Version 3.7.11; Version 3.7.12; Version 3.7.13; Version 3.7.14; Version 3.7.15; Version 3.7.16; Version 3.7.17; Version 3.7.18; Version 3.7.19; Version 3.7.20; Version 3.7.21; Version 3.7.22; Version 3.8; Version 3.8.1; Version 3.8.2; Version 3.8.3; Version 3.8.4; Version 3.8.5; Version 3.8.6; Version 3.8.7; Version 3.8.8; Version 3.8.9; Version 3.8.10; Version 3.8.11; Version 3.8.12; Version 3.8.13; Version 3.8.14; Version 3.8.15; Version 3.8.16; Version 3.8.17; Version 3.8.18; Version 3.8.19; Version 3.8.20; Version 3.8.21; Version 3.8.22; Version 3.9; Version 3.9.1; Version 3.9.2; Version 3.9.3; Version 3.9.4; Version 3.9.5; Version 3.9.6; Version 3.9.7; Version 3.9.8; Version 3.9.9; Version 3.9.10; Version 3.9.11; Version 3.9.12; Version 3.9.13; Version 3.9.14; Version 3.9.15; Version 3.9.16; Version 3.9.17; Version 3.9.18; Version 3.9.19; Version 3.9.20; Version 4.0; Version 4.0.1; Version 4.0.2; Version 4.0.3; Version 4.0.4; Version 4.0.5; Version 4.0.6; Version 4.0.7; Version 4.0.8; Version 4.0.9; Version 4.0.10; Version 4.0.11; Version 4.0.12; Version 4.0.13; Version 4.0.14; Version 4.0.15; Version 4.0.16; Version 4.0.17; Version 4.0.18; Version 4.0.19; Version 4.1; Version 4.1.1; Version 4.1.2; Version 4.1.3; Version 4.1.4; Version 4.1.5; Version 4.1.6; Version 4.1.7; Version 4.1.8; Version 4.1.9; Version 4.1.10; Version 4.1.11; Version 4.1.12; Version 4.1.13; Version 4.1.14; Version 4.1.15; Version 4.1.16; Version 4.1.17; Version 4.1.18; Version 4.1.19; Version 4.2; Version 4.2.1; Version 4.2.2; Version 4.2.3; Version 4.2.4; Version 4.2.5; Version 4.2.6; Version 4.2.7; Version 4.2.8; Version 4.2.9; Version 4.2.10; Version 4.2.11; Version 4.2.12; Version 4.2.13; Version 4.2.14; Version 4.2.15; Version 4.2.16; Version 4.3; Version 4.3.1; Version 4.3.2; Version 4.3.3; Version 4.3.4; Version 4.3.5; Version 4.3.6; Version 4.3.7; Version 4.3.8; Version 4.3.9; Version 4.3.10; Version 4.3.11; Version 4.3.12; Version 4.4; Version 4.4.1; Version 4.4.2; Version 4.4.3; Version 4.4.4; Version 4.4.5; Version 4.4.6; Version 4.4.7; Version 4.4.8; Version 4.4.9; Version 4.4.10; Version 4.4.11; Version 4.5; Version 4.5.1; Version 4.5.2; Version 4.5.3; Version 4.5.4; Version 4.5.5; Version 4.5.6; Version 4.5.7; Version 4.5.8; Version 4.5.9; Version 4.5.10; Version 4.6; Version 4.6.1; Version 4.6.2; Version 4.6.3; Version 4.6.4; Version 4.6.5; Version 4.6.6; Version 4.6.7; Version 4.7; Version 4.7.1; Version 4.7.2; Version 4.7.3; Version 4.7.4; Version 4.7.5; Version 4.8; Version 4.8.1

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• wordpress wordpress — Version 3.0
• wordpress wordpress — Version 3.0.1
• wordpress wordpress — Version 3.0.2
• wordpress wordpress — Version 3.0.3
• wordpress wordpress — Version 3.0.4
• wordpress wordpress — Version 3.0.5
• wordpress wordpress — Version 3.0.6
• wordpress wordpress — Version 3.1
• wordpress wordpress — Version 3.1.1
• wordpress wordpress — Version 3.1.2
• wordpress wordpress — Version 3.1.3
• wordpress wordpress — Version 3.1.4
• wordpress wordpress — Version 3.2
• wordpress wordpress — Version 3.2.1
• wordpress wordpress — Version 3.3
• wordpress wordpress — Version 3.3.1
• wordpress wordpress — Version 3.3.2
• wordpress wordpress — Version 3.3.3
• wordpress wordpress — Version 3.4
• wordpress wordpress — Version 3.4.1
• wordpress wordpress — Version 3.4.2
• wordpress wordpress — Version 3.5
• wordpress wordpress — Version 3.5.1
• wordpress wordpress — Version 3.5.2
• wordpress wordpress — Version 3.6
• wordpress wordpress — Version 3.6.1
• wordpress wordpress — Version 3.7
• wordpress wordpress — Version 3.7.1
• wordpress wordpress — Version 3.7.2
• wordpress wordpress — Version 3.7.3
• wordpress wordpress — Version 3.7.4
• wordpress wordpress — Version 3.7.5
• wordpress wordpress — Version 3.7.6
• wordpress wordpress — Version 3.7.7
• wordpress wordpress — Version 3.7.8
• wordpress wordpress — Version 3.7.9
• wordpress wordpress — Version 3.7.10
• wordpress wordpress — Version 3.7.11
• wordpress wordpress — Version 3.7.12
• wordpress wordpress — Version 3.7.13
• wordpress wordpress — Version 3.7.14
• wordpress wordpress — Version 3.7.15
• wordpress wordpress — Version 3.7.16
• wordpress wordpress — Version 3.7.17
• wordpress wordpress — Version 3.7.18
• wordpress wordpress — Version 3.7.19
• wordpress wordpress — Version 3.7.20
• wordpress wordpress — Version 3.7.21
• wordpress wordpress — Version 3.7.22
• wordpress wordpress — Version 3.8
• wordpress wordpress — Version 3.8.1
• wordpress wordpress — Version 3.8.2
• wordpress wordpress — Version 3.8.3
• wordpress wordpress — Version 3.8.4
• wordpress wordpress — Version 3.8.5
• wordpress wordpress — Version 3.8.6
• wordpress wordpress — Version 3.8.7
• wordpress wordpress — Version 3.8.8
• wordpress wordpress — Version 3.8.9
• wordpress wordpress — Version 3.8.10
• wordpress wordpress — Version 3.8.11
• wordpress wordpress — Version 3.8.12
• wordpress wordpress — Version 3.8.13
• wordpress wordpress — Version 3.8.14
• wordpress wordpress — Version 3.8.15
• wordpress wordpress — Version 3.8.16
• wordpress wordpress — Version 3.8.17
• wordpress wordpress — Version 3.8.18
• wordpress wordpress — Version 3.8.19
• wordpress wordpress — Version 3.8.20
• wordpress wordpress — Version 3.8.21
• wordpress wordpress — Version 3.8.22
• wordpress wordpress — Version 3.9
• wordpress wordpress — Version 3.9.1
• wordpress wordpress — Version 3.9.2
• wordpress wordpress — Version 3.9.3
• wordpress wordpress — Version 3.9.4
• wordpress wordpress — Version 3.9.5
• wordpress wordpress — Version 3.9.6
• wordpress wordpress — Version 3.9.7
• wordpress wordpress — Version 3.9.8
• wordpress wordpress — Version 3.9.9
• wordpress wordpress — Version 3.9.10
• wordpress wordpress — Version 3.9.11
• wordpress wordpress — Version 3.9.12
• wordpress wordpress — Version 3.9.13
• wordpress wordpress — Version 3.9.14
• wordpress wordpress — Version 3.9.15
• wordpress wordpress — Version 3.9.16
• wordpress wordpress — Version 3.9.17
• wordpress wordpress — Version 3.9.18
• wordpress wordpress — Version 3.9.19
• wordpress wordpress — Version 3.9.20
• wordpress wordpress — Version 4.0
• wordpress wordpress — Version 4.0.1
• wordpress wordpress — Version 4.0.2
• wordpress wordpress — Version 4.0.3
• wordpress wordpress — Version 4.0.4
• wordpress wordpress — Version 4.0.5
• wordpress wordpress — Version 4.0.6
• wordpress wordpress — Version 4.0.7
• wordpress wordpress — Version 4.0.8
• wordpress wordpress — Version 4.0.9
• wordpress wordpress — Version 4.0.10
• wordpress wordpress — Version 4.0.11
• wordpress wordpress — Version 4.0.12
• wordpress wordpress — Version 4.0.13
• wordpress wordpress — Version 4.0.14
• wordpress wordpress — Version 4.0.15
• wordpress wordpress — Version 4.0.16
• wordpress wordpress — Version 4.0.17
• wordpress wordpress — Version 4.0.18
• wordpress wordpress — Version 4.0.19
• wordpress wordpress — Version 4.1
• wordpress wordpress — Version 4.1.1
• wordpress wordpress — Version 4.1.2
• wordpress wordpress — Version 4.1.3
• wordpress wordpress — Version 4.1.4
• wordpress wordpress — Version 4.1.5
• wordpress wordpress — Version 4.1.6
• wordpress wordpress — Version 4.1.7
• wordpress wordpress — Version 4.1.8
• wordpress wordpress — Version 4.1.9
• wordpress wordpress — Version 4.1.10
• wordpress wordpress — Version 4.1.11
• wordpress wordpress — Version 4.1.12
• wordpress wordpress — Version 4.1.13
• wordpress wordpress — Version 4.1.14
• wordpress wordpress — Version 4.1.15
• wordpress wordpress — Version 4.1.16
• wordpress wordpress — Version 4.1.17
• wordpress wordpress — Version 4.1.18
• wordpress wordpress — Version 4.1.19
• wordpress wordpress — Version 4.2
• wordpress wordpress — Version 4.2.1
• wordpress wordpress — Version 4.2.2
• wordpress wordpress — Version 4.2.3
• wordpress wordpress — Version 4.2.4
• wordpress wordpress — Version 4.2.5
• wordpress wordpress — Version 4.2.6
• wordpress wordpress — Version 4.2.7
• wordpress wordpress — Version 4.2.8
• wordpress wordpress — Version 4.2.9
• wordpress wordpress — Version 4.2.10
• wordpress wordpress — Version 4.2.11
• wordpress wordpress — Version 4.2.12
• wordpress wordpress — Version 4.2.13
• wordpress wordpress — Version 4.2.14
• wordpress wordpress — Version 4.2.15
• wordpress wordpress — Version 4.2.16
• wordpress wordpress — Version 4.3
• wordpress wordpress — Version 4.3.1
• wordpress wordpress — Version 4.3.2
• wordpress wordpress — Version 4.3.3
• wordpress wordpress — Version 4.3.4
• wordpress wordpress — Version 4.3.5
• wordpress wordpress — Version 4.3.6
• wordpress wordpress — Version 4.3.7
• wordpress wordpress — Version 4.3.8
• wordpress wordpress — Version 4.3.9
• wordpress wordpress — Version 4.3.10
• wordpress wordpress — Version 4.3.11
• wordpress wordpress — Version 4.3.12
• wordpress wordpress — Version 4.4
• wordpress wordpress — Version 4.4.1
• wordpress wordpress — Version 4.4.2
• wordpress wordpress — Version 4.4.3
• wordpress wordpress — Version 4.4.4
• wordpress wordpress — Version 4.4.5
• wordpress wordpress — Version 4.4.6
• wordpress wordpress — Version 4.4.7
• wordpress wordpress — Version 4.4.8
• wordpress wordpress — Version 4.4.9
• wordpress wordpress — Version 4.4.10
• wordpress wordpress — Version 4.4.11
• wordpress wordpress — Version 4.5
• wordpress wordpress — Version 4.5.1
• wordpress wordpress — Version 4.5.2
• wordpress wordpress — Version 4.5.3
• wordpress wordpress — Version 4.5.4
• wordpress wordpress — Version 4.5.5
• wordpress wordpress — Version 4.5.6
• wordpress wordpress — Version 4.5.7
• wordpress wordpress — Version 4.5.8
• wordpress wordpress — Version 4.5.9
• wordpress wordpress — Version 4.5.10
• wordpress wordpress — Version 4.6
• wordpress wordpress — Version 4.6.1
• wordpress wordpress — Version 4.6.2
• wordpress wordpress — Version 4.6.3
• wordpress wordpress — Version 4.6.4
• wordpress wordpress — Version 4.6.5
• wordpress wordpress — Version 4.6.6
• wordpress wordpress — Version 4.6.7
• wordpress wordpress — Version 4.7
• wordpress wordpress — Version 4.7.1
• wordpress wordpress — Version 4.7.2
• wordpress wordpress — Version 4.7.3
• wordpress wordpress — Version 4.7.4
• wordpress wordpress — Version 4.7.5
• wordpress wordpress — Version 4.8
• wordpress wordpress — Version 4.8.1

References

• www.securityfocus.com http://www.securityfocus.com/bid/100912 Third Party Advisory, VDB Entry
• www.securitytracker.com http://www.securitytracker.com/id/1039553
• core.trac.wordpress.org https://core.trac.wordpress.org/changeset/41457 Patch, Vendor Advisory
• wordpress.org https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/ Patch, Release Notes, Vendor Advisory
• wpvulndb.com https://wpvulndb.com/vulnerabilities/8911 Third Party Advisory
• www.debian.org https://www.debian.org/security/2017/dsa-3997
• nvd.nist.gov Official NVD record