(#Several vulnerabilities have been identified in Wordpress:#- CVE-2015-5622: stored cross-site scripting vulnerability. An authenticated remote attacker could exploit it by inserting arbitrary JavaScript or HTML code on a WordPress page or post. To exploit this vulnerability, the attacker must have Contributor or Author level account##- CVE-2015-5623: security bypass vulnerability. An attacker with Subscriber permissions could exploit it in order to create a draft via "Quick Draft".##A proof of concept is available for the CVE-2015-5622 vulnerability.##The wordpress packages provided by Debian Squeeze 6, Wheezy 7 and Jessie 8 are vulnerable.##The wordpress packages provided by FreeBSD are vulnerable.)
