(#Several vulnerabilities have been identified in WordPress:#- CVE-2016-2222: server-side request forgery for for certain local URIs. An attacker can exploit it by sending a specially crafted application request in order to perform several operations like scan and attack systems on the LAN or enumerate services on these systems##- CVE-2016-2221: open redirect. A remote attacker could exploit it by inciting their victims to follow a specially crafted link in order to redirect to a malicious website.##No further information is available.#Updated, 08/02/2016:#The wordpress packages provided by Debian Squeeze 6 are vulnerable.)
