CVE-2017-6815

In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.


We have discovered 457,793 live websites that are affected by CVE-2017-6815.

Run a Free Instant Scan




Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains457,793 live websites (100% of WordPress install base)
Vulnerable Versions
  • from 0 through 4.7.3
Vulnerable Versions Count0 versions ( less than 0.1% of all versions)



Details

  • Published - Mar 12, 2017
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2017-6815
United States74,256 websites



Italy73,655 websites
Germany32,253 websites
Japan27,976 websites
GB24,089 websites
Russia23,257 websites
Poland20,697 websites
France19,773 websites
Netherlands16,081 websites
Australia11,392 websites

Website Distribution by TLD

Number of websites using CVE-2017-6815
.com156,764 websites
.it48,616 websites
.ru19,503 websites
.de15,851 websites
.org15,792 websites
.pl14,846 websites
.net14,734 websites
.co.uk13,661 websites
.nl10,934 websites
.com.au8,528 websites

Websites affected by CVE-2017-6815

Top websites that are affected by CVE-2017-6815. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.com United States*,***
************.org United States*,***
********.eu Austria*,***
********************.ru Russia*,***
****************.com United States*,***
*******.**.ca Canada*,***
**********.com United States**,***
***************.org United States**,***
********.gr Greece**,***
***********.**.za South Africa**,***
See full domain list

FAQ

A total of 457,793 websites have been identified as vulnerable to CVE-2017-6815, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2017-6815 vulnerability.
WordPress versions up to and including 4.7.3 are vulnerable to CVE-2017-6815.