CVE-2021-29450

medium

Published — · Modified —

CVSS v3

—

CVSS v2

—

VIR risk

5.5

Description

Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges. This has been patched in WordPress 5.7.1, along with the older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2021-29450

OS impact

OS	Version	Status	Fixed in
arch		fixed	`5.7.1-1`
debian	bookworm	fixed	`5.7.1+dfsg1-1`
debian	bullseye	fixed	`5.7.1+dfsg1-1`
debian	forky	fixed	`5.7.1+dfsg1-1`
debian	sid	fixed	`5.7.1+dfsg1-1`
debian	trixie	fixed	`5.7.1+dfsg1-1`

References

https://security-tracker.debian.org/tracker/CVE-2021-29450

Verify integrity in audit chain (admin only). AS-IS.