VulertSecurity VulertSecurity

Vulnerability Database · Debian · wordpress · Version

wordpress 5.7.1 dfsg1-2

5.7.1 dfsg1-2 is affected by 69 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 2 High 7 Medium 13 Low 0 Unrated 47

All wordpress versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

wordpress 5.7.1 dfsg1-2 vulnerabilities

69 vulnerabilities cover wordpress 5.7.1 dfsg1-2. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical SQL Injection and Remote Code Execution Vulnerability in WordPress 9.8 critical No fix published 17 Jul 2026
Critical Code Execution Vulnerability in WordPress - CVE-2021-44223 9.8 critical No fix published 25 Nov 2021
Remote Code Execution Vulnerability in WordPress - CVE-2026-65640 8.8 high No fix published 17 Aug 2026
Critical SQL Injection Vulnerability in WordPress - CVE-2022-21664 8.8 high 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
SQL Injection Vulnerability in WordPress - CVE-2022-21661 7.5 high 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
Denial of Service Vulnerability in WordPress 7.5 high No fix published 06 Feb 2018
Weak MD5 Password Hashing in WordPress - CVE-2012-6707 7.5 high No fix published 19 Oct 2017
Object Injection Vulnerability in WordPress Multisite - CVE-2022-21663 7.2 high 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
WordPress Plugin Upload Vulnerability - CVE-2018-14028 7.2 high No fix published 10 Aug 2018
Path Traversal Vulnerability in WordPress - CVE-2019-8943 6.5 medium No fix published 20 Feb 2019
Cross-Site Scripting Vulnerability in WordPress - CVE-2022-43500 6.1 medium 5.7.8+dfsg1-0+deb11u1 05 Dec 2022
Cross-Site Scripting Vulnerability in WordPress - CVE-2022-43497 6.1 medium 5.7.8+dfsg1-0+deb11u1 05 Dec 2022
SQL Injection Vulnerability in WordPress - CVE-2026-60137 5.9 medium No fix published 17 Jul 2026
Unauthenticated Blind SSRF in WordPress Pingback Feature 5.9 medium No fix published 14 Dec 2022
Authenticated Stored Cross-Site Scripting Vulnerability in WordPress (CVE-2022-4973) 5.4 medium 5.7.8+dfsg1-0+deb11u1 16 Oct 2024
Directory Traversal Vulnerability in WordPress Core (CVE-2023-2745) 5.4 medium 5.7.11+dfsg1-0+deb11u1 17 May 2023
Stored XSS Vulnerability in WordPress - CVE-2022-21662 5.4 medium 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
XSS Vulnerability in WordPress: Low-Privileged User Exploitation 5.4 medium 5.7.3+dfsg1-0+deb11u1 09 Sep 2021
Unauthorized User Field Exposure in WordPress REST API 5.3 medium 5.7.11+dfsg1-0+deb11u1 16 Oct 2023
Improper Authentication Vulnerability in WordPress - CVE-2022-43504 5.3 medium 5.7.8+dfsg1-0+deb11u1 05 Dec 2022
WordPress 4.7.2 - Path Disclosure Vulnerability in Debian 5.3 medium No fix published 22 May 2019
Sensitive Information Exposure in WordPress: CVE-2023-39999 4.3 medium 5.7.11+dfsg1-0+deb11u1 13 Oct 2023
Critical Vulnerability in WordPress Affects Multiple Debian Releases N/A unrated No fix published 07 Aug 2026
Critical Security Update for WordPress: Addressing Multiple Vulnerabilities N/A unrated 5.7.14+dfsg1-0+deb11u1 02 Nov 2025
Stored XSS Vulnerability in WordPress - CVE-2025-58674 N/A unrated No fix published 23 Sep 2025
Sensitive Data Exposure in WordPress: CVE-2025-58246 N/A unrated No fix published 23 Sep 2025
Remote Title Guessing Vulnerability in WordPress (CVE-2025-54352) N/A unrated No fix published 21 Jul 2025
WordPress XML-RPC Pingback Vulnerability: Title Guessing in Private and Draft Posts N/A unrated No fix published 21 Jul 2025
Authenticated Stored Cross-Site Scripting Vulnerability in WordPress N/A unrated 5.7.8+dfsg1-0+deb11u1 16 Oct 2024
WordPress Security Update - DSA-5685-1 N/A unrated 5.7.11+dfsg1-0+deb11u1 08 May 2024
Sensitive Information Exposure in WordPress Core: CVE-2023-5692 N/A unrated No fix published 05 Apr 2024
Critical RCE Vulnerability in WordPress: Unauthorized Plugin Upload Risk N/A unrated 5.7.11+dfsg1-0+deb11u1 04 Apr 2024
Critical File Upload Vulnerability in WordPress: CVE-2024-31210 N/A unrated 5.7.11+dfsg1-0+deb11u1 04 Apr 2024
WordPress REST API User Field Exposure Vulnerability N/A unrated 5.7.11+dfsg1-0+deb11u1 16 Oct 2023
Sensitive Information Exposure in WordPress - CVE-2023-39999 N/A unrated 5.7.11+dfsg1-0+deb11u1 13 Oct 2023
Directory Traversal Vulnerability in WordPress Package N/A unrated 5.7.11+dfsg1-0+deb11u1 17 May 2023
Unauthenticated Blind SSRF Vulnerability in WordPress N/A unrated No fix published 14 Dec 2022
Improper Authentication in WordPress: Remote Email Disclosure Vulnerability N/A unrated 5.7.8+dfsg1-0+deb11u1 05 Dec 2022
Cross-Site Scripting Vulnerability in WordPress: CVE-2022-43500 N/A unrated 5.7.8+dfsg1-0+deb11u1 05 Dec 2022
Cross-Site Scripting Vulnerability in WordPress: CVE-2022-43497 N/A unrated 5.7.8+dfsg1-0+deb11u1 05 Dec 2022
WordPress - SQL Injection, Open Redirect, Authorization Bypass, CSRF, and XSS Vulnerabilities N/A unrated 5.7.8+dfsg1-0+deb11u2 17 Nov 2022
WordPress Security Update - SQL Injection, Open Redirect, Authorization Bypass, CSRF, and XSS Vulnerabilities N/A unrated 5.7.8+dfsg1-0+deb11u1 15 Nov 2022
Critical Vulnerability in WordPress: Object Injection Bypass for Super Admins N/A unrated 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
Critical Stored XSS Vulnerability in WordPress - CVE-2022-21662 N/A unrated 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
Critical SQL Injection Vulnerability in WordPress Package N/A unrated 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
SQL Injection Vulnerability in WordPress: CVE-2022-21661 N/A unrated 5.7.5+dfsg1-0+deb11u1 06 Jan 2022
Data Leakage Vulnerability in WordPress - CVE-2021-39200 N/A unrated 5.7.3+dfsg1-0+deb11u1 09 Sep 2021
XSS Vulnerability in WordPress: Impacting Authenticated Users N/A unrated 5.7.3+dfsg1-0+deb11u1 09 Sep 2021
Critical Data Leakage Vulnerability in WordPress - CVE-2021-39200 N/A unrated 5.7.3+dfsg1-0+deb11u1 09 Sep 2021
Path Disclosure Vulnerability in WordPress - CVE-2017-6514 N/A unrated No fix published 22 May 2019
Path Traversal Vulnerability in WordPress: CVE-2019-8943 N/A unrated No fix published 20 Feb 2019
Critical File Upload Vulnerability in WordPress - CVE-2018-14028 N/A unrated No fix published 10 Aug 2018
Denial of Service Vulnerability in WordPress - CVE-2018-6389 N/A unrated No fix published 06 Feb 2018
CSRF Vulnerability in WordPress - Impacting Versions 2.0.11 and Earlier N/A unrated No fix published 30 Dec 2013
Cross-Site Request Forgery (CSRF) Vulnerability in WordPress N/A unrated No fix published 30 Dec 2013
Session Cookie Vulnerability in WordPress: CVE-2012-5868 N/A unrated No fix published 27 Dec 2012
WordPress 3.4.2 - Session Cookie Invalidation N/A unrated No fix published 27 Dec 2012
WordPress MySQL Query Limitation Vulnerability - CVE-2012-0937 N/A unrated No fix published 30 Jan 2012
WordPress Installation Component Remote Code Execution (CVE-2012-0937) N/A unrated No fix published 30 Jan 2012
Cross-Site Scripting Vulnerability in WordPress Installation Component N/A unrated No fix published 30 Jan 2012
Critical Database Configuration Vulnerability in WordPress Package N/A unrated No fix published 30 Jan 2012
WordPress Installation Error Message Vulnerability - CVE-2011-4898 N/A unrated No fix published 30 Jan 2012
Cross-Site Scripting (XSS) Vulnerabilities in WordPress N/A unrated No fix published 30 Jan 2012
Arbitrary Database Configuration and Code Injection in WordPress N/A unrated No fix published 30 Jan 2012
WordPress 3.3.1 and earlier - Brute-Force Attack Vulnerability N/A unrated No fix published 30 Jan 2012
N/A unrated No fix published 10 Jan 2008
Sensitive Information Disclosure in WordPress - CVE-2008-0191 N/A unrated No fix published 10 Jan 2008
Cross-Site Scripting Vulnerability in WordPress - CVE-2006-0733 N/A unrated No fix published 16 Feb 2006
Cross-Site Scripting (XSS) Vulnerability in WordPress 2.0.0 N/A unrated No fix published 16 Feb 2006

Looking for another version, or everything Vulert holds for wordpress?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About wordpress 5.7.1 dfsg1-2

Is wordpress 5.7.1 dfsg1-2 vulnerable?

Yes. 69 vulnerabilities in the Vulert database cover wordpress 5.7.1 dfsg1-2: 2 critical, 7 high, 13 medium and 0 low, plus 47 not yet rated. Each entry above names the fixed version to move to.

How do I monitor wordpress for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the wordpress version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.