CVE-2014-5203

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.89% chance of exploitation in the next 30 days, 90th percentile

Nuclei

high

Published

2014-08-18

Updated

2024-08-06

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2014/CVE-2014-5203-wordpress-99…

References

• CVE Record
• NVD entry

Related

• CVE-2014-5201
• CVE-2014-5204
• CVE-2014-5200
• CVE-2014-5205
• CVE-2014-5194
• CVE-2014-5207