{"schemaVersion":3,"id":"MGASA-2014-0328","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated wordpress packages fix security vulnerabilities\n\nMultiple vulnerabilities in WordPress before 3.9.2, including denial of\nservice and information disclosure issues related to XML entity expansion.\n\nThe wordpress package has been updated to version 3.9.2 to fix these issues.\nSee the release announcement for more details.","dates":{"published":"2014-08-12T09:16:46.000Z","modified":"2026-04-16T04:28:59.196Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"wordpress","name":"wordpress","label":"wordpress","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/wordpress","purlType":"rpm","versions":[{"text":"< 3.9.2-1.mga3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.9.2-1.mga3","eol":null,"hubHref":null},{"vendor":"mageia","product":"wordpress","name":"wordpress","label":"wordpress","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/wordpress","purlType":"rpm","versions":[{"text":"< 3.9.2-1.mga4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.9.2-1.mga4","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2014-0328.html","label":"advisories.mageia.org/MGASA-2014-0328.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13877","label":"bugs.mageia.org/show_bug.cgi?id=13877","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.debian.org/security/2014/dsa-3001","label":"www.debian.org/security/2014/dsa-3001","hostname":"www.debian.org","tags":["WEB"]},{"url":"https://wordpress.org/news/2014/08/wordpress-3-9-2/","label":"wordpress.org/news/2014/08/wordpress-3-9-2/","hostname":"wordpress.org","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2014-08-12T09:16:46.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:28:59.196Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:27:00.527Z","stale":false,"partial":false}}