CVE-2017-9061

In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename.

We have discovered 378,769 live websites that are affected by CVE-2017-9061.

Run a Free Instant Scan



Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains378,769 live websites (4.74% of WordPress install base)
Vulnerable Versions
  • from 0 through 4.7.5
Vulnerable Versions Count884 versions ( 59% of all versions)



Details

  • Published - May 18, 2017
  • Updated - Aug 5, 2024

Website Distribution by Country

Number of websites using CVE-2017-9061
United States76,094 websites


Italy49,840 websites
Japan33,384 websites
Germany26,724 websites
Russia18,650 websites
France16,690 websites
GB14,854 websites
Netherlands11,480 websites
Canada8,158 websites
Poland7,719 websites

Website Distribution by TLD

Number of websites using CVE-2017-9061
.com139,380 websites
.it33,243 websites
.ru15,563 websites
.org14,418 websites
.de14,321 websites
.net12,367 websites
.nl9,204 websites
.co.uk8,649 websites
.jp8,059 websites
.fr6,891 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2017-9061

Top websites that are affected by CVE-2017-9061. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******.com United States*,***
*****.com United States*,***
********.com United States*,***
************.org United States*,***
******.com France*,***
*******.org United States*,***
*********.io Netherlands*,***
*******.com United States*,***
********.eu Austria*,***
*************.org United States*,***
See full domain list

FAQ

A total of 378,769 websites have been identified as vulnerable to CVE-2017-9061, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2017-9061 vulnerability.
WordPress versions up to and including 4.7.5 are vulnerable to CVE-2017-9061.