cbcvebase.
CVE-2017-6816
published 2017-03-12

CVE-2017-6816: In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.

PriorityP428medium4.9CVSS 3.0
AVNACLPRHUINSUCNIHAN
EPSS
3.64%
88.3th percentile
In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.

Affected

8 ranges
VendorProductVersion rangeFixed in
debiandebian_linux——
debiandebian_linux——
debianwordpress< wordpress 4.7.3+dfsg-1 (bookworm)wordpress 4.7.3+dfsg-1 (bookworm)
wordpresswordpress<= 4.7.2—
wordpresswordpress>= 0 < 4.7.3+dfsg-14.7.3+dfsg-1
wordpresswordpress>= 0 < 4.7.3+dfsg-14.7.3+dfsg-1
wordpresswordpress>= 0 < 4.7.3+dfsg-14.7.3+dfsg-1
wordpresswordpress>= 0 < 4.7.3+dfsg-14.7.3+dfsg-1

CVSS provenance

nvdv3.04.9MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P
osv4.9MEDIUM
vendor_redhat7.1HIGH
vendor_debian4.9MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.