ZeroHour

CVE-2017-9065

CVSS 3.0
7.5 high
EPSS
4%p90
Published
()
Modified
Description

In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.

Vendors
wordpressdebian
Products
wordpress, debian linux
Ecosystems
WordPress
Weakness
CWE-20
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.