[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-119977/wordpress

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Nov 4 16:04:44 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d9f65134 by Salvatore Bonaccorso at 2026-11-04T17:04:13+01:00
Update status for CVE-2026-119977/wordpress

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3666,7 +3666,8 @@ CVE-2026-11396 (The Product Filter for WooCommerce by WBW plugin for WordPress i
 CVE-2026-119980 (The UsersWP \u2013 Front-end login form, User Registration, User Profi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-119977 (WordPress Core is vulnerable to Remote Code Execution in versions 4.7  ...)
-	NOT-FOR-US: WordPress plugin
+	- wordpress 7.1.4+dfsg1-1
+	NOTE: https://wordpress.org/news/2026/10/wordpress-7-1-4/
 CVE-2026-119730 (Maxthon Browser for Android before 7.5.8.103 contains an address bar s ...)
 	NOT-FOR-US: Maxthon Browser
 CVE-2026-119343 (Stirling-PDF is a locally hosted web application that facilitates vari ...)


=====================================
data/DSA/list
=====================================
@@ -30,7 +30,7 @@
 	{CVE-2026-86561 CVE-2026-86562 CVE-2026-86563 CVE-2026-86564 CVE-2026-86565 CVE-2026-86566 CVE-2026-86567 CVE-2026-86845 CVE-2026-86846 CVE-2026-86847 CVE-2026-86848 CVE-2026-86849 CVE-2026-86856 CVE-2026-93683 CVE-2026-100236}
 	[trixie] - dpdk 24.11.8-0+deb13u1
 [29 Oct 2026] DSA-6596-1 wordpress - security update
-	{CVE-2026-66666}
+	{CVE-2026-66666 CVE-2026-119977}
 	[trixie] - wordpress 6.8.12+dfsg1-0+deb13u1
 [29 Oct 2026] DSA-6595-1 tor - security update
 	[trixie] - tor 0.4.9.15-0+deb13u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9f65134fdc659d8f30c0f7c0750f38ba952119c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d9f65134fdc659d8f30c0f7c0750f38ba952119c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261104/7bf1a37a/attachment.htm>


More information about the debian-security-tracker-commits mailing list