Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress:wordpress:5.8:beta1:*:*:*:*:*:*

part: a version: 5.8 update: beta1

VendorWordpress (21977de4-0364-5ea6-90ad-48069434cf00)
ProductWordpress (56378cf2-4348-590a-a4d7-419fcf17f3f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wordpress/wordpress purl2cpe 2026-06-01 10:12:03.529138
pkg:github/wordpress/wordpress-develop purl2cpe 2026-06-01 10:12:03.529139

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-39203 vulnerable 2026-06-08 05:33:49.186745 Private data disclosure/privilege escalation through the block editor in Wordpress
MEDIUM (6.8)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions authenticated users who don't have permission to view private post types/data can bypass restrictions in the block editor under certain conditions. This affected WordPress 5.8 beta during the testing period. It's fixed in the final 5.8 release.
Published: 2021-09-09T22:00:11.000Z
Updated: 2024-08-04T01:58:18.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39202 vulnerable 2026-06-08 05:33:49.185655 WordPress 5.8 beta: Stored Cross-Site Scripting (XSS) vulnerability in widget
HIGH (7.6)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions the widgets editor introduced in WordPress 5.8 beta 1 has improper handling of HTML input in the Custom HTML feature. This leads to stored XSS in the custom HTML widget. This has been patched in WordPress 5.8. It was only present during the testing/beta phase of WordPress 5.8.
Published: 2021-09-09T21:55:11.000Z
Updated: 2024-08-04T01:58:18.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.