CVE-2017-14726 (MEDIUM 6.1) · Watchpost

← All vulnerabilities

CVE-2017-14726

MEDIUM 6.1CVE-2017-14726 · Published 23/09/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
wordpress wordpress	`≤ 4.8.1`	No fix yet

Description

Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor.

References

securityfocus.com/bid/100912 · Third Party Advisory
securitytracker.com/id/1039553
core.trac.wordpress.org/changeset/41395 · Patch
wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release · Patch
wpvulndb.com/vulnerabilities/8914
debian.org/security/2017/dsa-3997

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free