CVE-2017-6514

WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.

We have discovered 343,164 live websites that are affected by CVE-2017-6514.

Run a Free Instant Scan



Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains343,164 live websites (4.38% of WordPress install base)
Vulnerable Versions
  • from 0 through 4.7.2
Vulnerable Versions Count890 versions ( 58% of all versions)



Details

  • Published - May 22, 2019
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2017-6514
United States76,957 websites


Italy38,544 websites
Japan32,350 websites
Germany25,247 websites
France15,836 websites
Russia14,239 websites
GB13,780 websites
Netherlands10,410 websites
Poland9,064 websites
Spain6,959 websites

Website Distribution by TLD

Number of websites using CVE-2017-6514
.com131,129 websites
.it25,644 websites
.org14,319 websites
.de13,594 websites
.ru11,999 websites
.net11,417 websites
.nl8,480 websites
.co.uk8,213 websites
.jp7,781 websites
.pl6,800 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2017-6514

Top websites that are affected by CVE-2017-6514. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
******.org United States***
*******.com United States*,***
*******.com China*,***
*****.com United States*,***
********.com United States*,***
**********.es United States*,***
***********.com United States*,***
************.org United States*,***
******.com France*,***
********.*********.com United States*,***
See full domain list

FAQ

A total of 343,164 websites have been identified as vulnerable to CVE-2017-6514, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2017-6514 vulnerability.
WordPress versions up to and including 4.7.2 are vulnerable to CVE-2017-6514.