VulnerableCode Package Details - pkg:alpm/archlinux/wordpress@4.7.2-1

Search for packages

Vulnerability	Summary	Fixed by
VCID-e1ss-azne-d7ha Aliases: CVE-2017-6819	In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This.	4.7.3-1 Affected by 0 other vulnerabilities.
VCID-jf98-kean-p3b3 Aliases: CVE-2017-6818	In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.	4.7.3-1 Affected by 0 other vulnerabilities.
VCID-qpsj-hsmm-6qa8 Aliases: CVE-2017-6816	security update	4.7.3-1 Affected by 0 other vulnerabilities.
VCID-srjh-2qnk-e7c6 Aliases: CVE-2017-6817	security update	4.7.3-1 Affected by 0 other vulnerabilities.
VCID-tf2u-dse2-mufb Aliases: CVE-2017-6814	security update	4.7.3-1 Affected by 0 other vulnerabilities.
VCID-vywc-p4tw-8yd2 Aliases: CVE-2017-6815	security update	4.7.3-1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-e1ss-azne-d7ha
Aliases:
CVE-2017-6819

In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This.