Lucene search
+L

3 matches found

OSV
OSV
added 2017/01/15 2:59 a.m.31 views

CVE-2017-5492

Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...

8.8CVSS7.2AI score
SaveExploits0References8
Prion
Prion
added 2017/01/15 2:59 a.m.30 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...

6.8CVSS9.1AI score0.01862EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2017/01/15 2:0 a.m.40 views

CVE-2017-5492

Cross-site request forgery CSRF vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php...

8.8CVSS9.1AI score0.01862EPSS
SaveExploits0
Rows per page
Query Builder