Lucene search
Veracode Vulnerability DatabaseVERACODE:4856HistoryAug 03, 2017 - 8:41 a.m.
Authorization Bypass
2017-08-0308:41:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
EPSS
0.007
Percentile
79.6%
WordPress is vulnerable to authorization bypass. A malicious user can post without authorization through a spoofed email server with mail.example.com as the server name.
References
www.debian.org/security/2017/dsa-3779
www.openwall.com/lists/oss-security/2017/01/14/6
www.securityfocus.com/bid/95406
www.securitytracker.com/id/1037591
codex.wordpress.org/Version_4.7.1
github.com/WordPress/WordPress/commit/061e8788814ac87706d8b95688df276fe3c8596a
github.com/WordPress/WordPress/commit/2d2f78d6402814f3dcab92e2517b354dd3aa0a45
wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
wpvulndb.com/vulnerabilities/8719
Related
osv
osv
CVE-2017-5491
2017-01-15 02:59:02
wordpress - security update
2017-02-01 00:00:00
wordpress - security update
2017-02-01 00:00:00
prion
prion
Authentication flaw
2017-01-15 02:59:00
wpvulndb
wpvulndb
WordPress <= 4.7 - Post via Email Checks mail.example.com by Default
2017-01-11 00:00:00
cve
cve
CVE-2017-5491
2017-01-15 02:59:02
nvd
nvd
CVE-2017-5491
2017-01-15 02:59:02
ubuntucve
ubuntucve
CVE-2017-5491
2017-01-15 00:00:00
debiancve
debiancve
CVE-2017-5491
2017-01-15 02:59:02
cvelist
cvelist
CVE-2017-5491
2017-01-15 02:00:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2017-01-11 00:00:00
nessus
nessus
FreeBSD : wordpress -- multiple vulnerabilities (b180d1fb-dac6-11e6-ae1b-002590263bf5)
2017-01-16 00:00:00
WordPress < 4.7.1 Multiple Vulnerabilities
2017-01-17 00:00:00
Debian DSA-3779-1 : wordpress - security update
2017-02-02 00:00:00
openvas
openvas
WordPress < 4.7.1 Multiple Security Vulnerabilities - Windows
2017-01-20 00:00:00
WordPress < 4.7.1 Multiple Security Vulnerabilities - Linux
2017-01-20 00:00:00
Debian: Security Advisory (DLA-813-1)
2018-01-04 00:00:00
debian
debian
[SECURITY] [DLA 813-1] wordpress security update
2017-02-01 08:02:56
[SECURITY] [DSA 3779-1] wordpress security update
2017-02-01 14:30:41
[SECURITY] [DSA 3779-1] wordpress security update
2017-02-01 14:30:41
archlinux
archlinux
[ASA-201701-22] wordpress: multiple issues
2017-01-15 00:00:00