CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms.

We have discovered 442,792 live websites that are affected by CVE-2017-5610.

Run a Free Instant Scan



Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains442,792 live websites (5.40% of WordPress install base)
Vulnerable Versions
  • from 0 through 4.7.2
Vulnerable Versions Count768 versions ( 58% of all versions)



Details

  • Published - Jan 30, 2017
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2017-5610
United States74,369 websites


Italy69,276 websites
Germany32,637 websites
Japan24,511 websites
GB23,149 websites
Russia22,394 websites
Poland20,990 websites
France18,996 websites
Iran13,027 websites
Netherlands12,629 websites

Website Distribution by TLD

Number of websites using CVE-2017-5610
.com153,862 websites
.it45,478 websites
.ru18,594 websites
.org15,893 websites
.de15,757 websites
.pl15,066 websites
.net12,817 websites
.co.uk12,486 websites
.nl8,861 websites
.fr7,623 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2017-5610

Top websites that are affected by CVE-2017-5610. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.com United States*,***
************.org United States*,***
******.com France*,***
***********.eu Cyprus*,***
*******.org United States*,***
*********.io Netherlands*,***
***********.com United States*,***
********.com United States*,***
********.org United States*,***
********.eu Austria*,***
See full domain list

FAQ

A total of 442,792 websites have been identified as vulnerable to CVE-2017-5610, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2017-5610 vulnerability.
WordPress versions up to and including 4.7.2 are vulnerable to CVE-2017-5610.