CVE-2017-9064

In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for…

published May 18, 2017

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01742 · 77.4th percentile
Published
2017-05-18T14:00Z
EPSS history
Timeline
  • 18 MAY 14:00Z
    In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for…
    cvelistv5