Port details

www/wordpress 7.1.3,1

State-of-the-art semantic personal publishing platform

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: delphij@FreeBSD.org
Packages: latest: 7.1.3,1
Upstream: up to date
Last update: 2026-10-24 to 7.1.3,1 · 4dfd42fac9
Quarterly: 2026Q4: 7.1.2,1
Formerly: www/wordpress-mu until 2010-08-19
WWW: https://wordpress.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install wordpress

installs 7.1.3,1 from latest; from quarterly (2026Q4) 7.1.2,1

Port

# cd /usr/ports/www/wordpress && make install clean

# make -C /usr/ports/www/wordpress config  # change options first

Size

27 MiB download · 105 MiB installed

Depends on

archivers/php85-zip 8.5.12_2, archivers/php85-zlib 8.5.12_2, databases/php85-mysqli 8.5.12_2, devel/php85-tokenizer 8.5.12_2, ftp/php85-curl 8.5.12_2, ftp/php85-ftp 8.5.12_2, graphics/pecl-imagick 3.8.1, graphics/php85-exif 8.5.12_2, graphics/php85-gd 8.5.12_2, lang/php85 8.5.12_2, security/php85-filter 8.5.12_2, sysutils/php85-fileinfo 8.5.12_2, textproc/php85-xml 8.5.12_2

License

GPLv2+

Options

1 of 1 on in the package: DOCS

pkg-message

Shown after installing

Before the first use of WordPress, copy wp-config-sample.php to wp-config.php
in /usr/local/www/wordpress and modify it to fit your MySQL.
Maybe you need 'mysqladmin create wordpress' first.

Shown after upgrading

If you are upgrading, please run http://your.site/wordpress/wp-admin/upgrade.php
to upgrade WordPress.

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	7.1.3,1	7.1.3,1	–
FreeBSD 15	7.1.3,1	7.1.3,1	–
FreeBSD 14	7.1.3,1	7.1.3,1	7.1.3,1

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	7.1.2,1	7.1.2,1	–
FreeBSD 14	7.1.2,1	7.1.2,1	7.1.2,1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 7.1.3,1.

Fixed (52)

Show 52 fixed

VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).

CVE	CVSS	Published	Description
CVE-2026-87902	8.1	2026-09-22	An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active theme directories. If …

wordpress -- XSSentered 2024-04-10

no CVE referenced

wordpress -- multiple issuesentered 2022-03-16

no CVE referenced

WordPress -- Multiple Vulnerabilitiesentered 2022-01-13

no CVE referenced

wordpress -- multiple issuesentered 2020-11-02

no CVE referenced

wordpress -- multiple issuesentered 2019-12-26

no CVE referenced

wordpress -- multiple issuesentered 2019-11-12

no CVE referenced

wordpress -- multiple issuesentered 2019-09-06

no CVE referenced

wordpress -- multiple issuesentered 2019-03-21

no CVE referenced

wordpress -- multiple issuesentered 2018-12-15

no CVE referenced

wordpress -- multiple issuesentered 2018-07-08

no CVE referenced

wordpress -- multiple issuesentered 2018-04-20

no CVE referenced

wordpress -- multiple issuesentered 2018-01-19

no CVE referenced

wordpress -- multiple issuesentered 2017-12-01

no CVE referenced

wordpress -- multiple issuesentered 2017-11-01

no CVE referenced

wordpress -- multiple issuesentered 2017-09-29

CVE-2017-14718, CVE-2017-14719, CVE-2017-14720, CVE-2017-14721, CVE-2017-14722, CVE-2017-14724, CVE-2017-14726

Wordpress -- multiple vulnerabilitiesentered 2017-05-21

no CVE referenced

wordpress -- multiple vulnerabilitiesentered 2017-03-07

no CVE referenced

wordpress -- multiple vulnerabilitiesentered 2017-01-29

CVE-2017-5610, CVE-2017-5611, CVE-2017-5612

wordpress -- multiple vulnerabilitiesentered 2017-01-15

CVE-2017-5487, CVE-2017-5488, CVE-2017-5489, CVE-2017-5490, CVE-2017-5491, CVE-2017-5492, CVE-2017-5493

wordpress -- multiple vulnerabilitiesentered 2016-12-14

no CVE referenced

wordpress -- multiple vulnerabilitiesentered 2016-06-25

CVE-2016-5832, CVE-2016-5833, CVE-2016-5834, CVE-2016-5835, CVE-2016-5836, CVE-2016-5837, CVE-2016-5838, CVE-2016-5839

wordpress -- multiple vulnerabilitiesentered 2016-05-10

CVE-2016-4566, CVE-2016-4567

wordpress -- multiple vulnerabilitiesentered 2016-03-08

CVE-2016-2221, CVE-2016-2222

wordpress -- XSS vulnerabilityentered 2016-01-26

CVE-2016-1564

wordpress -- multiple vulnerabilitiesentered 2015-09-15

CVE-2015-5714, CVE-2015-5715, CVE-2015-7989

wordpress -- Multiple vulnerabilityentered 2015-08-06

CVE-2015-2213, CVE-2015-5730, CVE-2015-5731, CVE-2015-5732, CVE-2015-5733, CVE-2015-5734

wordpress -- XSS vulnerabilityentered 2015-07-23

CVE-2015-5622, CVE-2015-5623

wordpress -- cross-site scripting vulnerabilityentered 2015-05-07

no CVE referenced

wordpress -- 2 cross-site scripting vulnerabilitiesentered 2015-05-07

no CVE referenced

wordpress -- multiple vulnerabilitiesentered 2015-04-24

no CVE referenced

wordpress -- multiple vulnerabilitiesentered 2015-01-05

CVE-2014-9033, CVE-2014-9034, CVE-2014-9035, CVE-2014-9036, CVE-2014-9037, CVE-2014-9038, CVE-2014-9039

wordpress -- multiple vulnerabilitiesentered 2013-10-19

CVE-2013-4338, CVE-2013-4339, CVE-2013-4340, CVE-2013-5738, CVE-2013-5739

wordpress -- multiple vulnerabilitiesentered 2013-07-27

CVE-2013-2199, CVE-2013-2200, CVE-2013-2201, CVE-2013-2202, CVE-2013-2203, CVE-2013-2204, CVE-2013-2205

wordpress -- multiple vulnerabilitiesentered 2013-01-29

CVE-2013-0235, CVE-2013-0236, CVE-2013-0237

wordpress -- multiple unspecified privilege escalation bugsentered 2012-09-07

no CVE referenced

wordpress -- multiple vulnerabilitiesentered 2012-04-23

CVE-2012-2399, CVE-2012-2400, CVE-2012-2401, CVE-2012-2402, CVE-2012-2403, CVE-2012-2404

WordPress -- cross site scripting vulnerabilityentered 2012-01-03

no CVE referenced

wordpress -- SQL injection vulnerabilityentered 2011-02-05

CVE-2010-4257

wordpress -- multiple vulnerabilitiesentered 2009-11-14

CVE-2009-3890, CVE-2009-3891

wordpress -- remote admin password reset vulnerabilityentered 2009-08-12

CVE-2009-2762

wordpress -- header rss feed script insertion vulnerabilityentered 2008-11-29

CVE-2008-5278

wordpress -- snoopy "_httpsrequest()" shell command execution vulnerabilityentered 2008-10-24

no CVE referenced

wordpress -- remote privilege escalationentered 2008-10-22

CVE-2008-4107

wordpress -- cross-site scriptingentered 2007-11-01

CVE-2007-5710

wordpress -- remote sql injection vulnerabilityentered 2007-09-21

CVE-2007-4894

wordpress -- unmoderated comments disclosureentered 2007-06-09

no CVE referenced

wordpress -- XMLRPC SQL Injectionentered 2007-06-09

no CVE referenced

wordpress -- full path disclosureentered 2006-04-23

CVE-2005-4463

wordpress -- multiple vulnerabilitiesentered 2005-07-05

CVE-2005-1810

wordpress -- multiple vulnerabilitiesentered 2005-07-05

CVE-2005-2107, CVE-2005-2108, CVE-2005-2109, CVE-2005-2110

wordpress -- XSS in administration panelentered 2004-10-13

no CVE referenced

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (232)

2009-11-14 13:33Martin Wilke (miwi) · 2.8.6,1

- Update to 2.8.6

Security:	http://www.vuxml.org/freebsd/0640198a-d117-11de-b667-0030843d3802.html

9343f1bd9b

2009-10-29 12:35Martin Wilke (miwi) · 2.8.5,1

- Udpatet to 2.8.5

PR:		139812
Submitted by:	myself
Approved by:	maintainer

ff09b49222

2009-08-13 11:56Martin Wilke (miwi) · 2.8.4a,2 · as www/wordpress-mu

- Update to 2.8.4a

Hat:		secteam
Security:	http://www.vuxml.org/freebsd/2430e9c3-8741-11de-938e-003048590f9e.html

f7a527d3ef

2009-08-12 17:00Steven Kreuzer (skreuzer) · 2.8.4,1

Update to 3.8.4 which fixes the remote admin password reset vulnerability

Approved by:	secteam (remko)
VID:	2430e9c3-8741-11de-938e-003048590f9e

085a03bebb

2009-08-10 19:22Marcelo Araujo (araujo) · 2.8.3_1,2 · as www/wordpress-mu

- Remove comments forgotten on latest commit. - Bump PORTREVISION.

Pointyhat to:	myself

479bc5ee41

2009-08-10 17:20Marcelo Araujo (araujo) · 2.8.3,2 · as www/wordpress-mu

- Update to 2.8.3.

bed8277cfc

2009-08-05 09:50Martin Wilke (miwi) · 2.8.3,1

- Update to 2.8.3

PR:		137435
Submitted by:	miwi
Approved by:	maintainer

8444eb733f

2009-07-23 16:52Yi-Jheng Lin (yzlin) · 2.8.2,1

- Update to 2.8.2

PR:		ports/136927
Submitted by:	Yuan-Chung Hsiao <ychsiao AT ychsiao.org> (maintainer)
Approved by:	lwhsu (mentor)

6334ab2cf0

2009-07-21 13:41Marcelo Araujo (araujo) · 2.8.2,2 · as www/wordpress-mu

- Update to 2.8.2. - Use DIST_SUBDIR to make the version more sane.

cdc3a3f7f5

2009-07-14 17:56Marcelo Araujo (araujo) · 2.8.1,2 · as www/wordpress-mu

- Update to 2.8.1.

756144a7e5

2009-07-14 00:21Martin Wilke (miwi) · 2.8.1,1

- Update to 2.8.1

PR:		136642
Submitted by:	maintainer

6fcec2ce5d

2009-06-15 21:11Martin Wilke (miwi) · 2.8_1,1

- Add missing tokenizer dependency

Reported by:	Mats Andreassen <matsa@pvv.ntnu.no>

a98e14e367

2009-06-13 23:33Martin Wilke (miwi) · 2.8,1

- Update to 2.8

PR:		135524
Submitted by:	miwi
Approved by:	maintainer

847f76ab6c

2009-05-04 15:45Marcelo Araujo (araujo) · 2.7.1_1,2 · as www/wordpress-mu

- Update distfile to 2.7.1 forgotten on latest commit. - Bump PORTREVISION.

65d9020d42

2009-03-14 14:20Martin Wilke (miwi) · 2.7.1,1

- Add missing php-gd support

PR:		131910
Submitted by:	Jeff Kletsky <jeff+freebsd@wagsky.com>
Approved by:	wordpress and wordpress-mu maintainer timeout

f9321dbbc3

2009-02-15 14:24Martin Wilke (miwi) · 2.7.1,1

- Update to 2.7.1

PR:		131587
Submitted by:	miwi
Approved by:	maintainer

b355047814

2009-02-03 17:24Marcelo Araujo (araujo) · 2.7,2 · as www/wordpress-mu

- Update to 2.7.

PR:		ports/131340
Submitted by:	flz

dde333c29f

2008-12-12 22:28Martin Wilke (miwi) · 2.7.0,1

- Update to 2.7.0

PR:		129564
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

a2b282acf3

2008-11-29 17:28Martin Wilke (miwi) · 2.6.5,1

- Update to 2.6.5

Security:	http://www.vuxml.org/freebsd/622bc638-be27-11dd-a578-0030843d3802.html

cc9e9f62bf

2008-10-25 18:04Marcelo Araujo (araujo) · 2.6.3,2 · as www/wordpress-mu

- Update to 2.6.3.

PR:		ports/128365
Submitted by:	miwi
Security:	http://www.vuxml.org/freebsd/3a4a3e9c-a1fe-11dd-81be-001c2514716c.html

d13e9cf469

2008-10-24 20:49Martin Wilke (miwi) · 2.6.3,1

- Update to 2.6.3

PR:		128340
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

33d2f2e2bb

2008-10-14 13:16Marcelo Araujo (araujo) · 2.6.2,2 · as www/wordpress-mu

- Update to 2.6.2. - Removed comments in Makefile.

4e1e2070de

2008-09-10 14:08Martin Wilke (miwi) · 2.6.2,1

- Update to 2.6.2 (security update)

Approved by:	portmgr (pav)
Security:	http://www.vuxml.org/freebsd/884fced7-7f1c-11dd-a66a-0019666436c2.html

b445dd8f41

2008-08-15 07:46Edwin Groothuis (edwin) · 2.6.1,1

[MAINTAINER] www/wordpress: update to 2.6.1

PR:		ports/126545
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org>

96e9c5ef60

2008-08-10 05:25Marcelo Araujo (araujo) · 2.6,2 · as www/wordpress-mu

- Update to 2.6.

557edfca73

2008-07-17 21:42Martin Wilke (miwi) · 2.6.0,1

- Update to 2.6.0

PR:		125635
Submitted by:	miwi
Approved by:	maintainer

ecd3165861

2008-06-05 20:10Marcelo Araujo (araujo) · 1.5.1,2 · as www/wordpress-mu

- Update to 1.5.1.

Reported by:	pointyhat via pav

03c43202ed

2008-04-26 16:26Martin Wilke (miwi) · 2.5.1,1

- Update to 2.5.1

PR:		123104
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

007d3102c7

2008-03-30 03:23Martin Wilke (miwi) · 2.5,1

- Update to 2.5

PR:		122240
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

c2dee2a408

2008-02-08 11:18Martin Wilke (miwi) · 1.3.3,2 · as www/wordpress-mu

- Update to 1.3.3

Approved by:	asouza (maintainer via irc)

df34434de6

2008-02-05 15:13Martin Wilke (miwi) · 2.3.3,1

- Update to 2.3.3

PR:		120285
Submitted by:	miwi
Approved by:	maintainer

54fbb3f173

2007-12-31 01:49Martin Wilke (miwi) · 2.3.2,1

- Update to 2.3.2

PR:		119151
Submitted by:	miwi
Approved by:	maintainer

fffbb695ea

2007-11-14 20:35Marcelo Araujo (araujo) · 1.3.0,2 · as www/wordpress-mu

- Update to 1.3.0.

Reported by:	pointyhat (pav, linimon)
Approved by:	portmgr (pav), stas (mentor, implicit)

1ec51607dc

2007-11-05 13:53Martin Wilke (miwi) · 2.3.1,1

- Update to 2.3.1 (fix cross-site scripting)

PR:		117673
Submitted by:	tdb@
Approved by:	portmgr (pav)
Security:	http://www.vuxml.org/freebsd/a467d0f9-8875-11dc-b3ba-0016179b2dd5.html

6bfbc3bf05

2007-10-18 20:06Martin Wilke (miwi) · 2.3,1

- Update to 2.3

PR:		117042
Submitted by:	miwi
Approved by:	maintainer

5dceb4a7e8

2007-09-27 16:41Marcelo Araujo (araujo) · 1.2.5a,2 · as www/wordpress-mu

- Update to 1.2.5a. - Update MASTER_SITE.

Suggested by:	flz
Approved by:	stas (mentor)

58b9176e23

2007-09-16 01:05Martin Wilke (miwi) · 2.2.3,1

- Update to 2.2.3

PR:		116376
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

95506d7ce7

2007-08-28 13:58Marcelo Araujo (araujo) · 1.2.4,2 · as www/wordpress-mu

- Update version to 1.2.4. - Reworked Makefile to follow standards.

Approved by:	itetcu (mentor)

7dca4ce1a0

2007-08-06 00:05Martin Wilke (miwi) · 2.2.2,1

- Update to 2.2.2

PR:		115221
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

a25120c013

2007-07-30 03:19Marcelo Araujo (araujo) · 1.2.3,2 · as www/wordpress-mu

- Update to 1.2.3.

Approved by:	pav (portmgr, in mentor's absence)

d49b60b4dd

2007-06-29 18:29Marcelo Araujo (araujo) · 1.2.1,2 · as www/wordpress-mu

- Change my mail address to araujo@.

Approved by:	stas (mentor)

d2101f2dd8

2007-06-23 23:36Martin Wilke (miwi) · 2.2.1,1

- Update to 2.2.1

PR:		113973
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

91deed2566

2007-05-27 12:40Martin Wilke (miwi) · 2.2.0,1

- Update to 2.2.0

PR:		112803
Submitted by:	Yuan-Chung Hsiao <ychsiao@ychsiao.org> (maintainer)

7bf58164ab

2007-05-26 17:30Marcelo Araujo (araujo) · 1.2.1,2 · as www/wordpress-mu

- Update to 1.2.1. - Reset maintainership to araujo@bsdmail.org.

PR:		ports/112279
Submitted by:	Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw> (maintainer)
Approved by:	stas (mentor)

cd7a7d8de5

2007-04-05 13:06Nicola Vitale (nivit) · 2.1.3,1

- Update to 2.1.3

PR:		ports/111186
Submitted by:	Yuan-Chung Hsiao <ychsiao at ychsiao.org> (maintainer)

32fe36058d

2007-03-03 08:04Cheng-Lung Sung (clsung) · 2.1.2,1

- Update to 2.1.2

PR:		ports/109781
Submitted by:	maintainer (Yuan-Chung Hsiao)

39d7c8b7ed

2007-02-21 18:21Cheng-Lung Sung (clsung) · 2.1.1,1

- Update to 2.1.1

PR:		ports/109398
Submitted by:	maintainer (Yuan-Chung Hsiao)

073f825690

2007-01-23 08:14Yen-Ming Lee (leeym) · 2.1.0,1

- Update to 2.1.0

PR:		ports/108230
Submitted by:	maintainer

76b3f6969a

2007-01-17 04:45Cheng-Lung Sung (clsung) · 2.0.7,1

- Add Master url (Thanks infofarmer@FreeBSD.org)

PR:		ports/108024
Submitted by:	maintainer (Yuan-Chung Hsiao)

8543348a86

2007-01-16 06:46Cheng-Lung Sung (clsung) · 2.0.7,1

- Update to 2.0.7

PR:		ports/107969
Submitted by:	maintainer (Yuan-Chung Hsiao)

959073263f

www/py-tornado 1 unaddressed · 5.3	Oct 26
sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21