CVE-2017-14725

Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php.

CVSS v3.0 NVD

5.4 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0 NVD

4.9 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N

EPSS

2.19% chance of exploitation in the next 30 days, 82nd percentile

Nuclei

medium · CWE-601

Published

2017-09-23

Updated

2024-08-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14725.yaml

Security advisories

• https://core.trac.wordpress.org/changeset/41398
• https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release
• https://wpvulndb.com/vulnerabilities/8910
• http://www.securityfocus.com/bid/100912

References

• CVE Record
• NVD entry