Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| red_hat_products Red Hat · All currently supported Red Hat products | not affected vulnerable code not present | no version stated | not applicable | csaf_redhat | |
| https://github.com/wordpress/wordpress | affected | < 4b974c61ba56d7aab9e5aa928f921bb295d16965 | vendor fix → 4b974c61ba56d7aab9e5aa928f921bb295d16965 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 06fa4161aa74619239cf27017d124081c825684a, < d2107d8b699e5d3aec792cf4c50907d6288f4fc7 | vendor fix → d2107d8b699e5d3aec792cf4c50907d6288f4fc7 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 29ffbff370968ae48a1b7a34e35c8b8e75cf0f91, < fe927b80c905197d02f55b0be4579864c89ebe17 | vendor fix → fe927b80c905197d02f55b0be4579864c89ebe17 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 491c67be12ca8a9fe37ae38307ba7e298c976ec3, < bf829a2c84a789f026dcf2031d4d9563960fdb9a | vendor fix → bf829a2c84a789f026dcf2031d4d9563960fdb9a | osv | |
| https://github.com/wordpress/wordpress | affected | >= c33464a4554cff8a082bc353d9226d8104b80d2b, < bf8851400a9595ccb55e64dcc6be9cf37abe28e1 | vendor fix → bf8851400a9595ccb55e64dcc6be9cf37abe28e1 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 6fe64752be3260f2a47f38e68c2cb77400e5a0c9, < 4bc39aee09934e421bf2423eb23bff74a55b09a1 | vendor fix → 4bc39aee09934e421bf2423eb23bff74a55b09a1 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 50dc0ca5bb332c895f0f39fe4e6ee1e4a43e06dc, < c1b28183d0e6030d4759d68cb80432dcdf36809d | vendor fix → c1b28183d0e6030d4759d68cb80432dcdf36809d | osv | |
| https://github.com/wordpress/wordpress | affected | >= 9ff4499281663b0c772787fd4a60538288f842e9, < 79580a19dc0de5b5be7ce659cd5a5703d2b3c881 | vendor fix → 79580a19dc0de5b5be7ce659cd5a5703d2b3c881 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 537fd931bc02e6e934a2d774422b897871aa87ad, < a0e82957c576e965f7af722d81ac26166e2df194 | vendor fix → a0e82957c576e965f7af722d81ac26166e2df194 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 965fcddcf68cf4fd122ae24b992e242dfea1d773, < 032bc6e9accc94320f97902b44b5f17cc4c78d5d | vendor fix → 032bc6e9accc94320f97902b44b5f17cc4c78d5d | osv | |
| https://github.com/wordpress/wordpress | affected | >= 058f9903676a7efaee534a682df0a2a8b87574d8, < 5aa4a8330fdc5961585b66bca4c2fa4975b086ad | vendor fix → 5aa4a8330fdc5961585b66bca4c2fa4975b086ad | osv | |
| https://github.com/wordpress/wordpress | affected | >= 50caeb6e61ad0c49d2c7e1d6d5115047a011f590, < dc1be93bc16459a1a8fcfa1338b8291c7e3e1160 | vendor fix → dc1be93bc16459a1a8fcfa1338b8291c7e3e1160 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 73157386d069425c5e6ea7c4fc0122e8a9b58a7b, < 96bc7ee1f43709f40711fc9395c0f3c2e511b19f | vendor fix → 96bc7ee1f43709f40711fc9395c0f3c2e511b19f | osv | |
| https://github.com/wordpress/wordpress | affected | >= cc101b64012b16d087780657a2b828ccd7794a63, < 78612591f8c9dca7514fcaf0df48d54531c3ed7f | vendor fix → 78612591f8c9dca7514fcaf0df48d54531c3ed7f | osv | |
| https://github.com/wordpress/wordpress | affected | >= 6c5d5b5dcb9712bfc400b09cb6627e42898527af, < 7dd9afe0a6769d0a5b1384cc3460fd4b7bdabffa | vendor fix → 7dd9afe0a6769d0a5b1384cc3460fd4b7bdabffa | osv | |
| https://github.com/wordpress/wordpress | affected | >= 17e2eff4aa3beb2802cbec12b6f08e2fbf69893d, < a3fdd1f57a6e0a9a760234efa386b2c4418a4007 | vendor fix → a3fdd1f57a6e0a9a760234efa386b2c4418a4007 | osv | |
| https://github.com/wordpress/wordpress | affected | >= ac3899153a790a6f060dc816ff94812e0fd99875, < f96604eb17bb4aa7ab0680374df8efa6a2d3fe52 | vendor fix → f96604eb17bb4aa7ab0680374df8efa6a2d3fe52 | osv | |
| https://github.com/wordpress/wordpress | affected | >= e2d61d78ede843c2d05f44a4e15f30a57fb47d95, < cdc89a7cde831b0f1f1a6d86604eb509c1658152 | vendor fix → cdc89a7cde831b0f1f1a6d86604eb509c1658152 | osv | |
| https://github.com/wordpress/wordpress | affected | >= e75a577410e912e1408c49ace9103c3ee9997d76, < 25815a9f89a15bc3c1e2c3930f16b8a33023de23 | vendor fix → 25815a9f89a15bc3c1e2c3930f16b8a33023de23 | osv | |
| https://github.com/wordpress/wordpress | affected | >= b9bdf794320b132e6a4ce1538e988e6d31be33b0, < 63f40acfe3ae391172c8ab6af1209f41a605bedb | vendor fix → 63f40acfe3ae391172c8ab6af1209f41a605bedb | osv | |
| https://github.com/wordpress/wordpress | affected | >= 7766f0a793653329067bd50874872cc363af4461, < 4e8671406b8dd91d1883e3d244cbf7cc11e41944 | vendor fix → 4e8671406b8dd91d1883e3d244cbf7cc11e41944 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 6ba3d560fc2b033654f6dbfc6093fefb5c50f148, < 6e6fa053d0c3e8b8ba34d2b51edde9da699b3d91 | vendor fix → 6e6fa053d0c3e8b8ba34d2b51edde9da699b3d91 | osv | |
| https://github.com/wordpress/wordpress | affected | >= ec24ee6087dad52052c7d8a11d50c24c9ba89a3b, < d393902c3f38df7bdec27236e5dcb049d0e321e0 | vendor fix → d393902c3f38df7bdec27236e5dcb049d0e321e0 | osv | |
| https://github.com/wordpress/wordpress | affected | >= b16cd68ea199838d8f9daf0ff7e3f35042ba0ad0, < 7fde92a30f5d457ff91a91351769319194466f1b | vendor fix → 7fde92a30f5d457ff91a91351769319194466f1b | osv | |
| https://github.com/wordpress/wordpress | affected | >= b998fef9238af183f9523b3df71618e6e57498b6, < 160387b7312c9407c7fe4b1d3dd2055206749a34 | vendor fix → 160387b7312c9407c7fe4b1d3dd2055206749a34 | osv | |
| https://github.com/wordpress/wordpress | affected | < 1f10f081fca544747aa0821291f0f5e83036cfb0 | vendor fix → 1f10f081fca544747aa0821291f0f5e83036cfb0 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 2ac9b801ef5c18accf223b093529dacfcf809133, < 160ccf9264c676f786454d704ce1864288ad70cc | vendor fix → 160ccf9264c676f786454d704ce1864288ad70cc | osv | |
| https://github.com/wordpress/wordpress | affected | >= 31f7ece8503f0dc6ef1df2473ae3f3d352973e12, < cbf4802135d0adddfa1dc3119d1dd510cb5531c8 | vendor fix → cbf4802135d0adddfa1dc3119d1dd510cb5531c8 | osv | |
| https://github.com/wordpress/wordpress | affected | >= b3bf6266acd61682bc654845f621b4426645e324, < 7e8f9088e01098cc7c4af090c1293f02127be685 | vendor fix → 7e8f9088e01098cc7c4af090c1293f02127be685 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 5aa596fee9bf6ea7f0ccc2ed51b16c0f2f04076b, < 59f1e40c2998cf5bc5a69f5eb7fcc91d0bb804ac | vendor fix → 59f1e40c2998cf5bc5a69f5eb7fcc91d0bb804ac | osv | |
| https://github.com/wordpress/wordpress | affected | >= 1cf3888655c0eb8b0b0539834ad67db5920190d7, < d02ba3eb14be2a292cf8a7cd3c744b9a103f4629 | vendor fix → d02ba3eb14be2a292cf8a7cd3c744b9a103f4629 | osv | |
| https://github.com/wordpress/wordpress | affected | >= d05f0a86b23e37b9d97acd9317ff3fd661d64dea, < 4adf50f96257c3de7fd1461aacdd18d8bca85afb | vendor fix → 4adf50f96257c3de7fd1461aacdd18d8bca85afb | osv | |
| https://github.com/wordpress/wordpress | affected | >= e0bedd676512ace4c5586337c072037298315f79, < 8af9754d4ca343429f42a3333dd4ea73974bb2f8 | vendor fix → 8af9754d4ca343429f42a3333dd4ea73974bb2f8 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 944a787b8071d3a27f4ac68980c21ed6137db91d, < 92a8ddabe6221c8129a5e6aed3999bacb02993a1 | vendor fix → 92a8ddabe6221c8129a5e6aed3999bacb02993a1 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 96a6969aab5f0b9362cbc984af230bdfc93022e8, < adc01e3a1f295623711c33baccb36cc9942dc97c | vendor fix → adc01e3a1f295623711c33baccb36cc9942dc97c | osv | |
| https://github.com/wordpress/wordpress | affected | >= 895d6a691d7ccdfe80cdf999bc0c8a78d11ad55a, < c18b92b9203e158243e77d75e925e2a4f2792f0f | vendor fix → c18b92b9203e158243e77d75e925e2a4f2792f0f | osv | |
| https://github.com/wordpress/wordpress | affected | >= 4b54a6c2c9a3be775cc6dda66ed207998b068c8f, < 8681f271b7780d8f90c04b8ab75a370389017db0 | vendor fix → 8681f271b7780d8f90c04b8ab75a370389017db0 | osv | |
| https://github.com/wordpress/wordpress | affected | >= b83a8be65054cd890e24c7c1416ebbb39aeb4c09, < b5fbaef7ac4d33fba475d2b76c2100386595364b | vendor fix → b5fbaef7ac4d33fba475d2b76c2100386595364b | osv | |
| https://github.com/wordpress/wordpress | affected | >= 1c0a2efa5eac05dfd3b7d2b9cfe68e02da55b966, < 645b8112e05707a6f57b287fcb5c94128dc3af7b | vendor fix → 645b8112e05707a6f57b287fcb5c94128dc3af7b | osv | |
| https://github.com/wordpress/wordpress | affected | >= e33c9f3203961a823ec8410fc1481f6c87b4e3db, < b0554a93e60e7780ecc65ddf11493e531c26d7eb | vendor fix → b0554a93e60e7780ecc65ddf11493e531c26d7eb | osv | |
| https://github.com/wordpress/wordpress | affected | >= b829903bb0104bfeccc7623946a25cb7ccda1dea, < 3e52d0f74320d236cdf0147ea85741f7ebb5e090 | vendor fix → 3e52d0f74320d236cdf0147ea85741f7ebb5e090 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 4a6363076129378869f8742ef00a39a7421e6f29, < d532f18d63e4782cad3f72526999e431a689158f | vendor fix → d532f18d63e4782cad3f72526999e431a689158f | osv | |
| https://github.com/wordpress/wordpress | affected | >= 82dab16707a0a9af6a9707fed979a559aefdd511, < f57936455ed4e22e85bcf491250d26b5b7446522 | vendor fix → f57936455ed4e22e85bcf491250d26b5b7446522 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 720804c22f867fe56332ab513428e945c24b889d, < af10567c99596a570a2d35e29c17280ad1e1fde9 | vendor fix → af10567c99596a570a2d35e29c17280ad1e1fde9 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 4115c99a784db8a787e2245300c83c9c8d336503, < f24c1235372807013c2ce032a3b536c072d7d41a | vendor fix → f24c1235372807013c2ce032a3b536c072d7d41a | osv | |
| https://github.com/wordpress/wordpress | affected | >= 262f4b6add2d1503bdd35611764ec58742b10fb9, < 38fbfea21e62ed083d7d7a384c515fda220101cc | vendor fix → 38fbfea21e62ed083d7d7a384c515fda220101cc | osv | |
| https://github.com/wordpress/wordpress | affected | >= a33a49e2e7f7e47656bc835996c692593edeba00, < a62d18131a90b23ec55a21e24702abc5a24eee29 | vendor fix → a62d18131a90b23ec55a21e24702abc5a24eee29 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 3a87241015aff96c7a38c1304949908b9588b218, < 8491a9be893ce6e451afcda71bc9c76ae0f85a60 | vendor fix → 8491a9be893ce6e451afcda71bc9c76ae0f85a60 | osv | |
| https://github.com/wordpress/wordpress | affected | >= 26b68024931348d267b70e2a29910e1320d0094f, < ec455a506d511d8d233ae4ba158f1163c13dd888 | vendor fix → ec455a506d511d8d233ae4ba158f1163c13dd888 | osv | |
| https://github.com/wordpress/wordpress | affected | >= daaca56d3d6a9a42a0c87f6eda766c33a77c1d05, < 0a106cde38df869e196a83eb4975ba38a4e5837b | vendor fix → 0a106cde38df869e196a83eb4975ba38a4e5837b | osv | |
| wordpress | affected | < 7.1.2 | vendor fix → 7.1.2 | osv BIT-wordpress-2026-87902 | |
| wordpress-multisite | affected | < 7.1.2 | vendor fix → 7.1.2 | osv BIT-wordpress-multisite-2026-87902 | |
| https://github.com/wordpress/wordpress | fixed | 4b974c61ba56d7aab9e5aa928f921bb295d16965 | vendor fix → 4b974c61ba56d7aab9e5aa928f921bb295d16965 | osv | |
| https://github.com/wordpress/wordpress | fixed | d2107d8b699e5d3aec792cf4c50907d6288f4fc7 | vendor fix → d2107d8b699e5d3aec792cf4c50907d6288f4fc7 | osv | |
| https://github.com/wordpress/wordpress | fixed | fe927b80c905197d02f55b0be4579864c89ebe17 | vendor fix → fe927b80c905197d02f55b0be4579864c89ebe17 | osv | |
| https://github.com/wordpress/wordpress | fixed | bf829a2c84a789f026dcf2031d4d9563960fdb9a | vendor fix → bf829a2c84a789f026dcf2031d4d9563960fdb9a | osv | |
| https://github.com/wordpress/wordpress | fixed | bf8851400a9595ccb55e64dcc6be9cf37abe28e1 | vendor fix → bf8851400a9595ccb55e64dcc6be9cf37abe28e1 | osv | |
| https://github.com/wordpress/wordpress | fixed | 4bc39aee09934e421bf2423eb23bff74a55b09a1 | vendor fix → 4bc39aee09934e421bf2423eb23bff74a55b09a1 | osv | |
| https://github.com/wordpress/wordpress | fixed | c1b28183d0e6030d4759d68cb80432dcdf36809d | vendor fix → c1b28183d0e6030d4759d68cb80432dcdf36809d | osv |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.