CVE-2017-5612

Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via a crafted excerpt.

We have discovered 343,164 live websites that are affected by CVE-2017-5612.

Run a Free Instant Scan



Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains343,164 live websites (4.38% of WordPress install base)
Vulnerable Versions
  • from 0 through 4.7.2
Vulnerable Versions Count890 versions ( 58% of all versions)



Details

  • Published - Jan 30, 2017
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2017-5612
United States76,957 websites


Italy38,544 websites
Japan32,350 websites
Germany25,247 websites
France15,836 websites
Russia14,239 websites
GB13,780 websites
Netherlands10,410 websites
Poland9,064 websites
Spain6,959 websites

Website Distribution by TLD

Number of websites using CVE-2017-5612
.com131,129 websites
.it25,644 websites
.org14,319 websites
.de13,594 websites
.ru11,999 websites
.net11,417 websites
.nl8,480 websites
.co.uk8,213 websites
.jp7,781 websites
.pl6,800 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2017-5612

Top websites that are affected by CVE-2017-5612. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
******.org United States***
*******.com United States*,***
*******.com China*,***
*****.com United States*,***
********.com United States*,***
**********.es United States*,***
***********.com United States*,***
************.org United States*,***
******.com France*,***
********.*********.com United States*,***
See full domain list

FAQ

A total of 343,164 websites have been identified as vulnerable to CVE-2017-5612, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2017-5612 vulnerability.
WordPress versions up to and including 4.7.2 are vulnerable to CVE-2017-5612.