CVE-2017-6819

In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of…

published March 12, 2017

CVSS
—
EPSS
2%
Percentile
82.2
In the wild
Unconfirmed
What it is

In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02197 · 82.2th percentile
Published
2017-03-12T01:00Z
EPSS history
Timeline
  • 12 MAR 01:00Z
    In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of…
    cvelistv5