WordPress Vulnerabilities

WordPress < 5.8.2 - Expired DST Root CA X3 Certificate

Description

The wp-includes/certificates/ca-bundle.crt file contains a DST Root CA X3 which expired on September 30th, 2021, raising security warning in some cases

Affects WordPress

5.8.1
Fixed in WordPress 5.8.2
5.8
Fixed in WordPress 5.8.2
5.7.3
Fixed in WordPress 5.7.4
5.7.2
Fixed in WordPress 5.7.4
5.7.1
Fixed in WordPress 5.7.4
5.7
Fixed in WordPress 5.7.4
5.6.5
Fixed in WordPress 5.6.6
5.6.4
Fixed in WordPress 5.6.6
5.6.3
Fixed in WordPress 5.6.6
5.6.2
Fixed in WordPress 5.6.6
5.6.1
Fixed in WordPress 5.6.6
5.6
Fixed in WordPress 5.6.6
5.5.6
Fixed in WordPress 5.5.7
5.5.5
Fixed in WordPress 5.5.7
5.5.4
Fixed in WordPress 5.5.7
5.5.3
Fixed in WordPress 5.5.7
5.5.2
Fixed in WordPress 5.5.7
5.5.1
Fixed in WordPress 5.5.7
5.5
Fixed in WordPress 5.5.7
5.4.7
Fixed in WordPress 5.4.8
5.4.6
Fixed in WordPress 5.4.8
5.4.5
Fixed in WordPress 5.4.8
5.4.4
Fixed in WordPress 5.4.8
5.4.3
Fixed in WordPress 5.4.8
5.4.2
Fixed in WordPress 5.4.8
5.4.1
Fixed in WordPress 5.4.8
5.4
Fixed in WordPress 5.4.8
5.3.9
Fixed in WordPress 5.3.10
5.3.8
Fixed in WordPress 5.3.10
5.3.7
Fixed in WordPress 5.3.10
5.3.6
Fixed in WordPress 5.3.10
5.3.5
Fixed in WordPress 5.3.10
5.3.4
Fixed in WordPress 5.3.10
5.3.3
Fixed in WordPress 5.3.10
5.3.2
Fixed in WordPress 5.3.10
5.3.1
Fixed in WordPress 5.3.10
5.3
Fixed in WordPress 5.3.10
5.2.12
Fixed in WordPress 5.2.13
5.2.11
Fixed in WordPress 5.2.13
5.2.10
Fixed in WordPress 5.2.13
5.2.9
Fixed in WordPress 5.2.13
5.2.8
Fixed in WordPress 5.2.13
5.2.7
Fixed in WordPress 5.2.13
5.2.6
Fixed in WordPress 5.2.13
5.2.5
Fixed in WordPress 5.2.13
5.2.4
Fixed in WordPress 5.2.13
5.2.3
Fixed in WordPress 5.2.13
5.2.2
Fixed in WordPress 5.2.13
5.2.1
Fixed in WordPress 5.2.13
5.2
Fixed in WordPress 5.2.13

References

URL
https://wordpress.org/news/2021/11/wordpress-5-8-2-security-and-maintenance-release/
URL
https://core.trac.wordpress.org/ticket/54207

Miscellaneous

Verified
Yes
WPVDB ID
cc23344a-5c91-414a-91e3-c46db614da8d

Timeline

Publicly Published
2021-11-10 (about 4 years ago)
Added
2021-11-10 (about 4 years ago)
Last Updated
2022-04-16 (about 3 years ago)

Other

Published
Title
Published
2018-06-20
Title
Advanced Order Export For WooCommerce <= 1.5.4 - CSV Injection
Published
2018-03-14
Title
MailPoet Newsletters < 2.8.2 - Spam Vulnerability
Published
2017-11-29
Title
WordPress 3.7-4.9 - 'newbloguser' Key Weak Hashing
Published
2024-07-11
Title
Wallet System for WooCommerce < 2.5.14 - Information Exposure via Log Files
Published
2018-04-03
Title
WordPress 3.7-4.9.4 - Remove localhost Default