CVE-2017-5491

wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.

We have discovered 363,169 live websites that are affected by CVE-2017-5491.

Run a Free Instant Scan



Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains363,169 live websites (4.49% of WordPress install base)
Vulnerable Versions
  • from 0 through 4.7.1
Vulnerable Versions Count857 versions ( 59% of all versions)



Details

  • Published - Jan 15, 2017
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2017-5491
United States72,187 websites


Italy44,821 websites
Japan32,486 websites
Germany26,463 websites
Russia19,746 websites
France16,716 websites
GB14,455 websites
Netherlands10,923 websites
Spain7,431 websites
Poland7,340 websites

Website Distribution by TLD

Number of websites using CVE-2017-5491
.com133,241 websites
.it29,930 websites
.ru16,365 websites
.de13,934 websites
.org13,597 websites
.net11,798 websites
.nl8,689 websites
.co.uk8,390 websites
.jp7,784 websites
.fr6,861 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2017-5491

Top websites that are affected by CVE-2017-5491. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******.com United States*,***
*****.com United States*,***
************.org United States*,***
*******.org United States*,***
*********.io Netherlands*,***
***********.com United States*,***
*******.com United States*,***
********.eu Austria*,***
*************.com United States*,***
********************.ru Russia*,***
See full domain list

FAQ

A total of 363,169 websites have been identified as vulnerable to CVE-2017-5491, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2017-5491 vulnerability.
WordPress versions up to and including 4.7.1 are vulnerable to CVE-2017-5491.