Evil-DB LogoEvil-DB
← All CVEs

CVE-2017-14719

high · 7.5

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.

7.5
CVSS
12.4%
EPSS (exploit prob.)
96th
EPSS percentile
2017-09-23
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-22

Affected products

VendorProductAffected versions
wordpresswordpress3.0
wordpresswordpress3.0.1
wordpresswordpress3.0.2
wordpresswordpress3.0.3
wordpresswordpress3.0.4
wordpresswordpress3.0.5
wordpresswordpress3.0.6
wordpresswordpress3.1
wordpresswordpress3.1.1
wordpresswordpress3.1.2
wordpresswordpress3.1.3
wordpresswordpress3.1.4
wordpresswordpress3.2
wordpresswordpress3.2.1
wordpresswordpress3.3
wordpresswordpress3.3.1
wordpresswordpress3.3.2
wordpresswordpress3.3.3
wordpresswordpress3.4
wordpresswordpress3.4.1
wordpresswordpress3.4.2
wordpresswordpress3.5
wordpresswordpress3.5.1
wordpresswordpress3.5.2
wordpresswordpress3.6
wordpresswordpress3.6.1
wordpresswordpress3.7
wordpresswordpress3.7.1
wordpresswordpress3.7.2
wordpresswordpress3.7.3
wordpresswordpress3.7.4
wordpresswordpress3.7.5
wordpresswordpress3.7.6
wordpresswordpress3.7.7
wordpresswordpress3.7.8
wordpresswordpress3.7.9
wordpresswordpress3.7.10
wordpresswordpress3.7.11
wordpresswordpress3.7.12
wordpresswordpress3.7.13

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-14719