Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled.

Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform XML External Entity (XXE) attacks, and access private content.

CVE-2021-29447

Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack.

CVE-2021-29450

Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges.

For Debian 9 stretch, these problems have been fixed in version 4.7.20+dfsg-1+deb9u1.

We recommend that you upgrade your wordpress packages.

For the detailed security status of wordpress please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/wordpress

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

WordPress 5.7 < 5.7.1 / 5.6 < 5.6.3 / 5.5 < 5.5.4 / 5.4 < 5.4.5 / 5.3 < 5.3.7 / 5.2 < 5.2.10 / 5.1 < 5.1.9 / 5.0 < 5.0.12 / 4.9 < 4.9.17 / 4.8 < 4.8.16 / 4.7 < 4.7.20 is affected by multiple vulnerabilities:

  - A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library     leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is     possible in a successful XXE attack. (CVE-2021-29447)

  - One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and     pages. This requires at least contributor privileges. (CVE-2021-29450)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities :

 - An XML External Entity (XXE) vulnerability exists in the media library affecting PHP 8.

 - A data exposure vulnerability exists in the REST API.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
148963	Debian DSA-4896-1 : wordpress - security update	Nessus	Debian Local Security Checks	medium
148927	Debian DLA-2630-1 : wordpress security update	Nessus	Debian Local Security Checks	medium
148844	WordPress 5.7 < 5.7.1 / 5.6 < 5.6.3 / 5.5 < 5.5.4 / 5.4 < 5.4.5 / 5.3 < 5.3.7 / 5.2 < 5.2.10 / 5.1 < 5.1.9 / 5.0 < 5.0.12 / 4.9 < 4.9.17 / 4.8 < 4.8.16 / 4.7 < 4.7.20	Nessus	CGI abuses	medium
112754	WordPress 5.7.x < 5.7.1 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112753	WordPress 5.6.x < 5.6.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112752	WordPress 5.5.x < 5.5.4 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112751	WordPress 5.4.x < 5.4.5 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112750	WordPress 5.3.x < 5.3.7 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112749	WordPress 5.2.x < 5.2.10 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112748	WordPress 5.1.x < 5.1.9 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112747	WordPress 5.0.x < 5.0.12 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112746	WordPress 4.9.x < 4.9.17 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112745	WordPress 4.8.x < 4.8.16 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium
112744	WordPress 4.7.x < 4.7.20 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	medium

Detections

Analytics

CVE-2021-29447

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium