Description

In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.

Remediation

References

CVE-2017-9062

Related Vulnerabilities

WordPress Plugin Video Conferencing with Zoom Cross-Site Scripting (3.8.15)

Roundcube Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6172)

Envoy Proxy CVE-2020-25018 Vulnerability (CVE-2020-25018)

WordPress Plugin N-Media Website Contact Form with File Upload Local File Inclusion (1.5)

Nginx Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)

Severity

High

Classification

CVE-2017-9062 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities