PT-2019-5217 · WordPress · Wordpress

🗓️ 11 Sep 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 7 Views

WordPress before 5.2.4 mishandles static query property, enabling unauthenticated access to confidential data; update to 5.2.4+.

Reporter	Title	Published	Views	Family All 569
GithubExploit	Exploit for Cross-Site Request Forgery (CSRF) in Wordpress	19 May 202022:09	–	githubexploit
GithubExploit	Exploit for Path Traversal in Wordpress	18 Aug 201904:50	–	githubexploit
GithubExploit	Exploit for Cross-Site Request Forgery (CSRF) in Wordpress	29 Jun 202108:57	–	githubexploit
0day.today	WordPress Core 5.2.3 - Viewing Unauthenticated/Password/Private Posts Vulnerability	20 Nov 201900:00	–	zdt
0day.today	WordPress Medic Theme v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password Exploit	19 Jun 202300:00	–	zdt
BDU FSTEC	The vulnerability of the wp_ajax_upload_attachment function in the WordPress content management system allows attackers to compromise data integrity.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wp_validate_redirect function in the WordPress content management system, related to the redirection of URLs to an unreliable website, allows attackers to gain access to sensitive data and compromise its integrity.	7 May 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.	7 May 202000:00	–	bdu_fstec

Source	Link
github	www.github.com/sijiahi/Wordpress_cve-2019-9787_defense
exploit-db	www.exploit-db.com/exploits/47690
github	www.github.com/WordPress/WordPress/commit/f82ed753cf00329a5e41f2cb6dc521085136f308
osv	www.osv.dev/vulnerability/CVE-2019-17671
bdu	www.bdu.fstec.ru/vul/2020-03937
bdu	www.bdu.fstec.ru/vul/2020-01950
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2020-03934
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2020-01939

07 Feb 2025 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.3 - 9.8

CVSS 27.5

CVSS 38.8

EPSS0.81017