CVE-2017-5487

wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.

CVSS v3.0 NVD

5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

87.30% chance of exploitation in the next 30 days, 100th percentile

Nuclei

medium · CWE-200

Published

2017-01-15

Updated

2024-08-05

Proof-of-concept exploits (12)

• GeunSam2/CVE-2017-54872★ · 2019-06-10
• Jhonsonwannaa/CVE-2017-54870★ · 2025-02-22
• MRKWP/mrkwp-rest-permissions3★ · 2024-04-04
• SeasonLeague/CVE-2017-54870★ · 2023-01-29
• dream434/CVE-2017-54870★ · 2025-02-22
• mr-won/cve-2017-54870★ · 2025-03-08
• ndr-repo/CVE-2017-54870★ · 2025-05-14
• ndr-repo/PSRedTeam0★ · 2026-08-20
• patilkr/wp-CVE-2017-5487-exploit2★ · 2020-04-30
• tpdlshdmlrkfmcla/cve-2017-54870★ · 2025-03-08
• user20252228/cve-2017-54870★ · 2025-03-08
• zkhalidul/GrabberWP-CVE-2017-54870★ · 2021-11-09

Nuclei templates (1)

• linuxadi/40k-nuclei-templates/blob/main/aditya/folder4/cve-2017-5487-3022.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41497

Exploit collections (1)

• CVE-2017-5487.yamlzan8in/afrog

Security advisories

• https://codex.wordpress.org/Version_4.7.1
• https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release
• http://www.openwall.com/lists/oss-security/2017/01/14/6
• https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-…
• WordPress/WordPress/commit/daf358983cc1ce0c77bf6d2de2ebbb43df2add60
• http://www.securityfocus.com/bid/95391

References

• CVE Record
• NVD entry

Related

• CVE-2018-10118
• CVE-2018-11564
• CVE-2018-8718
• CVE-2017-9841
• CVE-2021-42013
• CVE-2023-27372