CVE-2017-14724 (MEDIUM 6.1) · Watchpost

← All vulnerabilities

CVE-2017-14724

MEDIUM 6.1CVE-2017-14724 · Published 23/09/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
wordpress wordpress	`≤ 4.8.1`	No fix yet

Description

Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.

References

securityfocus.com/bid/100912 · Third Party Advisory
securitytracker.com/id/1039553
core.trac.wordpress.org/changeset/41448 · Patch
wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release · Patch
wpvulndb.com/vulnerabilities/8913 · Third Party Advisory
debian.org/security/2017/dsa-3997

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free