CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user…

published January 30, 2017

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05201 · 92.4th percentile
Published
2017-01-30T04:24Z
EPSS history
Timeline
  • 30 JAN 04:24Z
    wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user…
    cvelistv5