WordPress Vulnerabilities

WordPress < 5.8.2 - Expired DST Root CA X3 Certificate

Description

The wp-includes/certificates/ca-bundle.crt file contains a DST Root CA X3 which expired on September 30th, 2021, raising security warning in some cases

Affects WordPress

5.8.1

Fixed in version 5.8.3

5.8

Fixed in version 5.8.3

5.7.3

Fixed in version 5.7.5

5.7.2

Fixed in version 5.7.5

5.7.1

Fixed in version 5.7.5

5.7

Fixed in version 5.7.5

5.6.5

Fixed in version 5.6.7

5.6.4

Fixed in version 5.6.7

5.6.3

Fixed in version 5.6.7

5.6.2

Fixed in version 5.6.7

References

URL

https://wordpress.org/news/2021/11/wordpress-5-8-2-security-and-maintenance-release/

URL

https://core.trac.wordpress.org/ticket/54207

Classification

Type

UNKNOWN

Miscellaneous

Verified

Yes

WPVDB ID

cc23344a-5c91-414a-91e3-c46db614da8d

Timeline

Publicly Published

2021-11-10 (about 9 months ago)

Added

2021-11-10 (about 9 months ago)

Last Updated

2022-04-16 (about 3 months ago)

Our Other Services

WPScan WordPress Security Plugin