Published: 12/03/2017 Updated: 19/03/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

In WordPress prior to 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress

Debian Bug report logs - #857026 wordpress: 473 security release Package: src:wordpress; Maintainer for src:wordpress is Craig Small <csmall@debianorg>; Reported by: Craig Small <csmall@debianorg> Date: Tue, 7 Mar 2017 10:33:02 UTC Severity: grave Tags: security, upstream Found in version wordpress/472 Fixed ...

A cross-site request forgery (CSRF) vulnerability exists on the Press This page of WordPress This issue can be used to create a Denial of Service (DoS) condition if an authenticated administrator visits a malicious URL ...

Stored XSS in Wordpress Core for embed youtube urls: created by adding crafted xss youtube embed url WPScan summary: Title: WordPress 40-472 - Authenticated Stored Cross-Site Scripting (XSS) in YouTube URL Embeds Reference: wpvulndbcom/vulnerabilities/8768 Reference: wordpressorg/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/ Reference: ht

CWE-352 https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_press_this_function_allows_dos.html https://github.com/WordPress/WordPress/commit/263831a72d08556bc2f3a328673d95301a152829 https://codex.wordpress.org/Version_4.7.3 http://openwall.com/lists/oss-security/2017/03/06/7 http://www.securityfocus.com/bid/96602 https://wpvulndb.com/vulnerabilities/8770 http://www.securitytracker.com/id/1037959 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857026 https://nvd.nist.gov https://security.archlinux.org/CVE-2017-6819

CVE-2017-6819

Vulnerability Summary

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect