PT-2017-4047 · WordPress · Wordpress

Published 2017-01-29 · Updated 2021-01-30 · CVE-2017-5611

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.2

Description The issue is related to a SQL injection vulnerability in the WP Query function, specifically in the wp-includes/class-wp-query.php file. This vulnerability can be exploited by remote attackers to execute arbitrary SQL commands, provided that an affected plugin or theme mishandles a crafted post type name. The vulnerability is associated with the lack of protection for the SQL query structure.

Recommendations For versions prior to 4.7.2, update to version 4.7.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted post type names in affected plugins or themes until a patch is applied. Additionally, ensure that all plugins and themes are updated to their latest versions to minimize the risk of exploitation.

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2021-00683

CVE-2017-5611

DLA-813-1

DSA-3779-1

Affected Products

Wordpress

References · 33

• https://github.com/WordPress/WordPress/commit/85384297a60900004e27e417eac56d24267054cb · Patch
• https://wordpress.org/news/2017/01/wordpress-4-7-2-security-release · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5610 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-5611 · Security Note
• https://wpvulndb.com/vulnerabilities/8730 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-5611 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5491 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5611 · Security Note
• http://openwall.com/lists/oss-security/2017/01/28/5 · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5492 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3779-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/wordpress · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-5611 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5490 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-5611 · Security Note