CVE-2017-5487

🗓️ 15 Jan 2017 02:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1127 Views🌐 WEB

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in WordPress 4.7 before 4.7.1 allows remote attackers to obtain sensitive information

Reporter	Title	Published	Views	Family All 38
0day.today	Wordpress 4.7.1 - Username Enumeration Exploit	3 Mar 201700:00	–	zdt
Gitee	Exploit for Path Traversal in Codiad	24 Nov 202016:49	–	gitee
Gitee	Exploit for Path Traversal in Codiad	6 Sep 202515:20	–	gitee
Gitee	Exploit for Path Traversal in Codiad	26 Sep 202021:18	–	gitee
Tenable Nessus	WordPress < 4.7.1 Multiple Vulnerabilities	17 Jan 201700:00	–	nessus
Tenable Nessus	FreeBSD : wordpress -- multiple vulnerabilities (b180d1fb-dac6-11e6-ae1b-002590263bf5)	16 Jan 201700:00	–	nessus
Tenable Nessus	WordPress 4.7.x < 4.7.1 Multiple Vulnerabilities	5 Nov 201800:00	–	nessus
Tenable Nessus	WordPress 4.6.x < 4.6.2 Multiple Vulnerabilities	5 Nov 201800:00	–	nessus
Tenable Nessus	WordPress 4.5.x < 4.5.5 Multiple Vulnerabilities	5 Nov 201800:00	–	nessus
Tenable Nessus	WordPress 4.4.x < 4.4.6 Multiple Vulnerabilities	5 Nov 201800:00	–	nessus

NVD

Node

wordpress wordpressRange≤4.7

Source	Link
github	www.github.com/WordPress/WordPress/commit/daf358983cc1ce0c77bf6d2de2ebbb43df2add60
wordfence	www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/
exploit-db	www.exploit-db.com/exploits/41497/
wpvulndb	www.wpvulndb.com/vulnerabilities/8715
wordpress	www.wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/
securityfocus	www.securityfocus.com/bid/95391
openwall	www.openwall.com/lists/oss-security/2017/01/14/6
codex	www.codex.wordpress.org/Version_4.7.1
securitytracker	www.securitytracker.com/id/1037591

Parameter	Position	Path	Description	CWE
roles	path	wp-json/wp/v2/users	WordPress REST API user endpoint exposure enabling username/user data disclosure due to insufficient access restrictions (CWE-200).	CWE-200
context	path	wp-json/wp/v2/users	WordPress REST API user endpoint exposure enabling username/user data disclosure due to insufficient access restrictions (CWE-200).	CWE-200
orderby	path	wp-json/wp/v2/users	WordPress REST API user endpoint exposure enabling username/user data disclosure due to insufficient access restrictions (CWE-200).	CWE-200

13 May 2026 00:24Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 35.3

EPSS0.92497

CWE-200