WordPress Vulnerabilities

WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks

Affects WordPress

3.8.1

Fixed in version 3.8.21

3.8

Fixed in version 3.8.21

3.7.1

Fixed in version 3.7.21

3.6

Fixed in version 4.7.5

3.5.2

Fixed in version 4.7.5

3.5.1

Fixed in version 4.7.5

3.5

Fixed in version 4.7.5

3.4.2

Fixed in version 4.7.5

3.4.1

Fixed in version 4.7.5

3.4

Fixed in version 4.7.5

References

CVE

CVE-2017-9065

URL

https://wordpress.org/news/2017/05/wordpress-4-7-5/

URL

https://github.com/WordPress/WordPress/commit/e88a48a066ab2200ce3091b131d43e2fab2460a4

Classification

Type

BYPASS

Miscellaneous

Submitter

ethicalhack3r

Submitter twitter

ethicalhack3r

Verified

WPVDB ID

a5a4f4ca-19e5-4665-b501-5c75e0f56001

Timeline

Publicly Published

2017-05-16 (about 5 years ago)

Added

2017-05-17 (about 5 years ago)

Last Updated

2020-09-22 (about 2 years ago)

Our Other Services

WPScan WordPress Security Plugin