CVE-2019-17673

—

CVSS 3.1

7.5 high

EPSS

3%p87

Published

Oct 17, 2019 (Oct 17, 2019)

Modified

Jun 17, 2026

Description

WordPress before 5.2.4 is vulnerable to poisoning of the cache of JSON GET requests because certain requests lack a Vary: Origin header.

Vendors: wordpress debian
Products: wordpress, debian linux
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.