VulertSecurity VulertSecurity

Vulnerability Database · Debian · wordpress · Version

wordpress 6.4.1 dfsg1-1.1

6.4.1 dfsg1-1.1 is affected by 37 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 2 High 4 Medium 4 Low 0 Unrated 27

All wordpress versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

wordpress 6.4.1 dfsg1-1.1 vulnerabilities

37 vulnerabilities cover wordpress 6.4.1 dfsg1-1.1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical SQL Injection and Remote Code Execution Vulnerability in WordPress 9.8 critical No fix published 17 Jul 2026
Critical Code Execution Vulnerability in WordPress - CVE-2021-44223 9.8 critical No fix published 25 Nov 2021
Remote Code Execution Vulnerability in WordPress - CVE-2026-65640 8.8 high No fix published 17 Aug 2026
Denial of Service Vulnerability in WordPress 7.5 high No fix published 06 Feb 2018
Weak MD5 Password Hashing in WordPress - CVE-2012-6707 7.5 high No fix published 19 Oct 2017
WordPress Plugin Upload Vulnerability - CVE-2018-14028 7.2 high No fix published 10 Aug 2018
Path Traversal Vulnerability in WordPress - CVE-2019-8943 6.5 medium No fix published 20 Feb 2019
SQL Injection Vulnerability in WordPress - CVE-2026-60137 5.9 medium No fix published 17 Jul 2026
Unauthenticated Blind SSRF in WordPress Pingback Feature 5.9 medium No fix published 14 Dec 2022
WordPress 4.7.2 - Path Disclosure Vulnerability in Debian 5.3 medium No fix published 22 May 2019
Critical Vulnerability in WordPress Affects Multiple Debian Releases N/A unrated No fix published 07 Aug 2026
Stored XSS Vulnerability in WordPress - CVE-2025-58674 N/A unrated No fix published 23 Sep 2025
Sensitive Data Exposure in WordPress: CVE-2025-58246 N/A unrated No fix published 23 Sep 2025
Remote Title Guessing Vulnerability in WordPress (CVE-2025-54352) N/A unrated No fix published 21 Jul 2025
WordPress XML-RPC Pingback Vulnerability: Title Guessing in Private and Draft Posts N/A unrated No fix published 21 Jul 2025
Sensitive Information Exposure in WordPress Core: CVE-2023-5692 N/A unrated No fix published 05 Apr 2024
Unauthenticated Blind SSRF Vulnerability in WordPress N/A unrated No fix published 14 Dec 2022
Path Disclosure Vulnerability in WordPress - CVE-2017-6514 N/A unrated No fix published 22 May 2019
Path Traversal Vulnerability in WordPress: CVE-2019-8943 N/A unrated No fix published 20 Feb 2019
Critical File Upload Vulnerability in WordPress - CVE-2018-14028 N/A unrated No fix published 10 Aug 2018
Denial of Service Vulnerability in WordPress - CVE-2018-6389 N/A unrated No fix published 06 Feb 2018
CSRF Vulnerability in WordPress - Impacting Versions 2.0.11 and Earlier N/A unrated No fix published 30 Dec 2013
Cross-Site Request Forgery (CSRF) Vulnerability in WordPress N/A unrated No fix published 30 Dec 2013
Session Cookie Vulnerability in WordPress: CVE-2012-5868 N/A unrated No fix published 27 Dec 2012
WordPress 3.4.2 - Session Cookie Invalidation N/A unrated No fix published 27 Dec 2012
WordPress Installation Component Remote Code Execution (CVE-2012-0937) N/A unrated No fix published 30 Jan 2012
WordPress MySQL Query Limitation Vulnerability - CVE-2012-0937 N/A unrated No fix published 30 Jan 2012
Cross-Site Scripting Vulnerability in WordPress Installation Component N/A unrated No fix published 30 Jan 2012
Critical Database Configuration Vulnerability in WordPress Package N/A unrated No fix published 30 Jan 2012
WordPress Installation Error Message Vulnerability - CVE-2011-4898 N/A unrated No fix published 30 Jan 2012
WordPress 3.3.1 and earlier - Brute-Force Attack Vulnerability N/A unrated No fix published 30 Jan 2012
Arbitrary Database Configuration and Code Injection in WordPress N/A unrated No fix published 30 Jan 2012
Cross-Site Scripting (XSS) Vulnerabilities in WordPress N/A unrated No fix published 30 Jan 2012
Sensitive Information Disclosure in WordPress - CVE-2008-0191 N/A unrated No fix published 10 Jan 2008
N/A unrated No fix published 10 Jan 2008
Cross-Site Scripting (XSS) Vulnerability in WordPress 2.0.0 N/A unrated No fix published 16 Feb 2006
Cross-Site Scripting Vulnerability in WordPress - CVE-2006-0733 N/A unrated No fix published 16 Feb 2006

Looking for another version, or everything Vulert holds for wordpress?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About wordpress 6.4.1 dfsg1-1.1

Is wordpress 6.4.1 dfsg1-1.1 vulnerable?

Yes. 37 vulnerabilities in the Vulert database cover wordpress 6.4.1 dfsg1-1.1: 2 critical, 4 high, 4 medium and 0 low, plus 27 not yet rated. Each entry above names the fixed version to move to.

How do I monitor wordpress for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the wordpress version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.