CVE-2017-6514

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a…

published May 22, 2019

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03008 · 87.2th percentile
Published
2019-05-22T17:20Z
EPSS history
Timeline
  • 22 MAY 17:20Z
    WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a…
    cvelistv5