CVE-2017-9062 is a high-severity vulnerability affecting WordPress versions prior to 4.7.5, specifically involving improper handling of post meta data values within the XML-RPC API. This network-exploitable flaw has a CVSS score of 8.6, indicating a critical impact on integrity, allowing an unauthenticated attacker to modify data without user interaction. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and community discussion is minimal, the vulnerability remains a significant risk for unpatched WordPress installations.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 4.7.4CPE matchmatch criteria | cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.