Description

Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash file upload.

Remediation

References

CVE-2017-5489

Related Vulnerabilities

WordPress Plugin bSuite Cross-Site Scripting (4.0.7)

ownCloud CVE-2017-9339 Vulnerability (CVE-2017-9339)

WordPress Plugin Easy Social Icons Cross-Site Scripting (3.1.2)

WordPress Plugin Pierre's Wordspew 'wordspew.php' Multiple SQL Injection Vulnerabilities (5.61)

Oracle JRE CVE-2017-10281 Vulnerability (CVE-2017-10281)

Severity

High

Classification

CVE-2017-5489 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities