Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges. This has been patched in WordPress 5.7.1, along with the older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix.
References
| Link | Resource |
|---|---|
| https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pmmh-2f36-wvhq | Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html | Mailing List Third Party Advisory |
| https://wordpress.org/news/category/security/ | Vendor Advisory |
| https://www.debian.org/security/2021/dsa-4896 | Third Party Advisory |
| https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pmmh-2f36-wvhq | Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html | Mailing List Third Party Advisory |
| https://wordpress.org/news/category/security/ | Vendor Advisory |
| https://www.debian.org/security/2021/dsa-4896 | Third Party Advisory |
Configurations
History
21 Nov 2024, 06:01
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 6.5 |
| References | () https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pmmh-2f36-wvhq - Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html - Mailing List, Third Party Advisory | |
| References | () https://wordpress.org/news/category/security/ - Vendor Advisory | |
| References | () https://www.debian.org/security/2021/dsa-4896 - Third Party Advisory |
Information
Published : 2021-04-15 22:15
Updated : 2024-11-21 06:01
NVD link : CVE-2021-29450
Mitre link : CVE-2021-29450
CVE.ORG link : CVE-2021-29450
JSON object : View
Products Affected
debian
- debian_linux
wordpress
- wordpress
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor