CVE-2019-17675
High
Description
WordPress before 5.2.4 does not properly consider type confusion during validation of the referer in the admin pages, possibly leading to CSRF.
SeverityHigh
CVSS8.8
Exploit probability87. percentile2.8%
Product
Wordpress
PublishedOct 17, 2019
First seenOct 17, 2019
How to fix
Update
- wordpress wordpress5.2.4 or later
Patches
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress wordpress | v < 5.2.4 | 5.2.4 |
| debian debian_linux | 8.0, 9.0, 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.