WordPress Prior to 4.7.5 Multiple Security Vulnerabilities

Bugtraq ID:	98509
Class:	Unknown
CVE:	CVE-2017-9061 CVE-2017-9062 CVE-2017-9063 CVE-2017-9064 CVE-2017-9065 CVE-2017-9066
Remote:	Yes
Local:	No
Published:	May 16 2017 12:00AM
Updated:	Jun 01 2017 04:01PM
Credit:	Ronni Skansing, Sam Thomas,Ben Bidner, Yorick Koster,Ronni Skansing,Weston Ruter.
Vulnerable:	WordPress WordPress 4.7.4 WordPress WordPress 4.7.2 WordPress WordPress 4.7.1 WordPress WordPress 4.6.1 WordPress WordPress 4.5.2 WordPress WordPress 4.5.1 WordPress WordPress 4.5 WordPress WordPress 4.4.1 WordPress WordPress 4.4 WordPress WordPress 4.2.4 WordPress WordPress 4.2.3 WordPress WordPress 4.2.2 WordPress WordPress 4.2.1 WordPress WordPress 4.1.2 WordPress WordPress 4.1.1 WordPress WordPress 4.1 WordPress WordPress 3.9.2 WordPress WordPress 3.9.1 WordPress WordPress 3.9 WordPress WordPress 3.8.2 WordPress WordPress 3.8.1 WordPress WordPress 3.7.4 WordPress WordPress 3.7.1 WordPress WordPress 3.6.1 WordPress WordPress 3.6 WordPress WordPress 3.5.2 WordPress WordPress 3.5.1 WordPress WordPress 3.3.2 WordPress WordPress 3.2.2 WordPress WordPress 3.1.4 WordPress WordPress 3.1.3 WordPress WordPress 3.1.2 WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 4.7.3 WordPress WordPress 4.7 WordPress WordPress 4.6 WordPress WordPress 4.5.3 WordPress WordPress 4.4.2 WordPress WordPress 4.3.1 WordPress WordPress 4.3 WordPress WordPress 4.2 WordPress WordPress 4.0.1 WordPress WordPress 4.0 WordPress WordPress 3.9.3 WordPress WordPress 3.9 WordPress WordPress 3.8.5 WordPress WordPress 3.8.4 WordPress WordPress 3.8.3 WordPress WordPress 3.8 WordPress WordPress 3.7.5 WordPress WordPress 3.7 WordPress WordPress 3.6 WordPress WordPress 3.5.0 WordPress WordPress 3.5 WordPress WordPress 3.4.2 WordPress WordPress 3.4.1 WordPress WordPress 3.4.0 WordPress WordPress 3.4 WordPress WordPress 3.3.3 WordPress WordPress 3.3.1 WordPress WordPress 3.3 WordPress WordPress 3.2.1 WordPress WordPress 3.2 WordPress WordPress 3.1 WordPress WordPress 3.0.6 WordPress WordPress 3.0.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	WordPress WordPress 4.7.5

WordPress Prior to 4.7.5 Multiple Security Vulnerabilities

WordPress is prone to the following security vulnerabilities:

1. An open-redirect vulnerability
2. Multiple security-bypass vulnerabilities
3. Multiple cross-site scripting vulnerabilities
4. A cross-site request-forgery vulnerability

An attacker may leverage these issues to execute HTML and script code in the browser of an unsuspecting user in the context of the affected site, perform certain unauthorized actions actions, or bypass certain security restrictions.

WordPress versions 4.7.4 and prior versions are vulnerable.

WordPress Prior to 4.7.5 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WordPress Prior to 4.7.5 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

WordPress Prior to 4.7.5 Multiple Security Vulnerabilities

References:

• Add nonce for updating file system credentials. (WordPress)
  
• Adjust post meta checks (WordPress)
  
• Customize: Igore invalid customization sessions. (WordPress)
  
• Improve redirect handling (WordPress)
  
• Whitelist post arguments in XML-RPC (WordPress)
  
• WordPress 4.7.5 Security and Maintenance Release (WordPress)
  
• WordPress HomePage (WordPress)
  
• Media: Simplify upload error message construction. (WordPress)
  
• Version 4.7.5 (WordPress)