WordPress Vulnerabilities

WordPress < 5.8.2 - Expired DST Root CA X3 Certificate

Description

The wp-includes/certificates/ca-bundle.crt file contains a DST Root CA X3 which expired on September 30th, 2021, raising security warning in some cases

Affects WordPress

5.8.1
Fixed in WordPress 5.8.2
5.8
Fixed in WordPress 5.8.2
5.7.3
Fixed in WordPress 5.7.4
5.7.2
Fixed in WordPress 5.7.4
5.7.1
Fixed in WordPress 5.7.4
5.7
Fixed in WordPress 5.7.4
5.6.5
Fixed in WordPress 5.6.6
5.6.4
Fixed in WordPress 5.6.6
5.6.3
Fixed in WordPress 5.6.6
5.6.2
Fixed in WordPress 5.6.6
5.6.1
Fixed in WordPress 5.6.6
5.6
Fixed in WordPress 5.6.6
5.5.6
Fixed in WordPress 5.5.7
5.5.5
Fixed in WordPress 5.5.7
5.5.4
Fixed in WordPress 5.5.7
5.5.3
Fixed in WordPress 5.5.7
5.5.2
Fixed in WordPress 5.5.7
5.5.1
Fixed in WordPress 5.5.7
5.5
Fixed in WordPress 5.5.7
5.4.7
Fixed in WordPress 5.4.8
5.4.6
Fixed in WordPress 5.4.8
5.4.5
Fixed in WordPress 5.4.8
5.4.4
Fixed in WordPress 5.4.8
5.4.3
Fixed in WordPress 5.4.8
5.4.2
Fixed in WordPress 5.4.8
5.4.1
Fixed in WordPress 5.4.8
5.4
Fixed in WordPress 5.4.8
5.3.9
Fixed in WordPress 5.3.10
5.3.8
Fixed in WordPress 5.3.10
5.3.7
Fixed in WordPress 5.3.10
5.3.6
Fixed in WordPress 5.3.10
5.3.5
Fixed in WordPress 5.3.10
5.3.4
Fixed in WordPress 5.3.10
5.3.3
Fixed in WordPress 5.3.10
5.3.2
Fixed in WordPress 5.3.10
5.3.1
Fixed in WordPress 5.3.10
5.3
Fixed in WordPress 5.3.10
5.2.12
Fixed in WordPress 5.2.13
5.2.11
Fixed in WordPress 5.2.13
5.2.10
Fixed in WordPress 5.2.13
5.2.9
Fixed in WordPress 5.2.13
5.2.8
Fixed in WordPress 5.2.13
5.2.7
Fixed in WordPress 5.2.13
5.2.6
Fixed in WordPress 5.2.13
5.2.5
Fixed in WordPress 5.2.13
5.2.4
Fixed in WordPress 5.2.13
5.2.3
Fixed in WordPress 5.2.13
5.2.2
Fixed in WordPress 5.2.13
5.2.1
Fixed in WordPress 5.2.13
5.2
Fixed in WordPress 5.2.13

References

URL
https://wordpress.org/news/2021/11/wordpress-5-8-2-security-and-maintenance-release/
URL
https://core.trac.wordpress.org/ticket/54207

Miscellaneous

Verified
Yes
WPVDB ID
cc23344a-5c91-414a-91e3-c46db614da8d

Timeline

Publicly Published
2021-11-10 (about 2 years ago)
Added
2021-11-10 (about 2 years ago)
Last Updated
2022-04-16 (about 2 years ago)

Other

Published
Title
Published
2019-07-01
Title
Easy Forms for Mailchimp < 6.5.3 - Code Injection
Published
2014-09-21
Title
MailPoet Newsletters 2.6.7 - helpers/back.php page Parameter Unspecified Issue
Published
2015-01-17
Title
Store Locator Plus 4.2.23 - Email Injection
Published
2023-09-25
Title
Simple Membership < 4.3.5 - Privilege escalation via Registration
Published
2024-02-12
Title
WP Editor < 1.2.8 - Sensitive Information Exposure via log file