WordPress Vulnerabilities

WordPress 3.7-4.9 - 'newbloguser' Key Weak Hashing

Affects WordPress

3.8.1

Fixed in version 3.8.24

3.8

Fixed in version 3.8.24

3.7.1

Fixed in version 3.7.24

3.9

Fixed in version 3.9.22

3.9.1

Fixed in version 3.9.22

3.7

Fixed in version 3.7.24

3.8.2

Fixed in version 3.8.24

3.8.3

Fixed in version 3.8.24

3.9.2

Fixed in version 3.9.22

4.0

Fixed in version 4.0.21

References

CVE

CVE-2017-17091

URL

https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/

URL

https://github.com/WordPress/WordPress/commit/eaf1cfdc1fe0bdffabd8d879c591b864d833326c

Classification

Type

UNKNOWN

Miscellaneous

Submitter

ethicalhack3r

Submitter twitter

ethicalhack3r

Verified

WPVDB ID

809f68d5-97aa-44e5-b181-cc7bdf5685c5

Timeline

Publicly Published

2017-11-29 (about 4 years ago)

Added

2017-11-30 (about 4 years ago)

Last Updated

2020-09-22 (about 2 years ago)

Our Other Services

WPScan WordPress Security Plugin