Published: 23/09/2017 Updated: 10/11/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Before version 4.8.2, WordPress allowed a Directory Traversal attack in the Customizer component via a crafted theme filename.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress 4.7.5
wordpress wordpress 4.8
wordpress wordpress 4.7.3
wordpress wordpress 4.7.4
wordpress wordpress 4.7
wordpress wordpress 4.8.1
wordpress wordpress 4.7.1
wordpress wordpress 4.7.2

Debian Bug report logs - #877629 wordpress: CVE-2017-14990 Package: src:wordpress; Maintainer for src:wordpress is Craig Small <csmall@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 3 Oct 2017 15:21:02 UTC Severity: important Tags: security, upstream Found in version wordpress/482+d ...

Debian Bug report logs - #876274 wordpress: 9 security bugs in wordpress 481 and earlier Package: src:wordpress; Maintainer for src:wordpress is Craig Small <csmall@debianorg>; Reported by: Craig Small <csmall@debianorg> Date: Wed, 20 Sep 2017 12:24:01 UTC Severity: grave Tags: security, upstream Found in versio ...

Several vulnerabilities were discovered in Wordpress, a web blogging tool They would allow remote attackers to exploit path-traversal issues, perform SQL injections and various cross-site scripting attacks For the oldstable distribution (jessie), these problems have been fixed in version 41+dfsg-1+deb8u15 For the stable distribution (stretch), ...

CWE-22 https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/https://core.trac.wordpress.org/changeset/41397 https://wpvulndb.com/vulnerabilities/8912 http://www.securityfocus.com/bid/100912 http://www.securitytracker.com/id/1039553 https://www.debian.org/security/2017/dsa-3997 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877629 https://www.debian.org/security/./dsa-3997

CVE-2017-14722

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect