CVE-2017-14723 - Vulnerability Details - OpenCVE

Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Wordpress	Wordpress

Configuration 1 [-]

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.spirityenterprise.com/pentest
http://www.securityfocus.com/bid/100912
http://www.securitytracker.com/id/1039553
https://core.trac.wordpress.org/changeset/41470
https://core.trac.wordpress.org/changeset/41496
https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48
https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec
https://medium.com/websec/wordpress-sqli-bbb2afcc8e94
https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e
https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
https://www.debian.org/security/2017/dsa-3997

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-09-23T20:00:00.000Z

Updated: 2024-08-05T19:34:39.971Z

Reserved: 2017-09-23T00:00:00.000Z

Link: CVE-2017-14723

Vulnrichment

No data.

NVD

Status : Modified

Published: 2017-09-23T20:29:00.420

Modified: 2026-05-13T00:24:29.033

Link: CVE-2017-14723

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2017-09-23T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-11-09T10:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "DSA-3997", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "https://www.debian.org/security/2017/dsa-3997"}, {"tags": ["x_refsource_MISC"], "url": "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e"}, {"name": "100912", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/100912"}, {"name": "1039553", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1039553"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec"}, {"tags": ["x_refsource_MISC"], "url": "https://core.trac.wordpress.org/changeset/41470"}, {"tags": ["x_refsource_MISC"], "url": "https://core.trac.wordpress.org/changeset/41496"}, {"tags": ["x_refsource_MISC"], "url": "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/"}, {"tags": ["x_refsource_MISC"], "url": "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-14723", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "DSA-3997", "refsource": "DEBIAN", "url": "https://www.debian.org/security/2017/dsa-3997"}, {"name": "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e", "refsource": "MISC", "url": "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e"}, {"name": "100912", "refsource": "BID", "url": "http://www.securityfocus.com/bid/100912"}, {"name": "1039553", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1039553"}, {"name": "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec", "refsource": "MISC", "url": "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec"}, {"name": "https://core.trac.wordpress.org/changeset/41470", "refsource": "MISC", "url": "https://core.trac.wordpress.org/changeset/41470"}, {"name": "https://core.trac.wordpress.org/changeset/41496", "refsource": "MISC", "url": "https://core.trac.wordpress.org/changeset/41496"}, {"name": "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/", "refsource": "MISC", "url": "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/"}, {"name": "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94", "refsource": "MISC", "url": "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94"}, {"name": "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48", "refsource": "MISC", "url": "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T19:34:39.971Z"}, "title": "CVE Program Container", "references": [{"name": "DSA-3997", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "https://www.debian.org/security/2017/dsa-3997"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e"}, {"name": "100912", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/100912"}, {"name": "1039553", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1039553"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://core.trac.wordpress.org/changeset/41470"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://core.trac.wordpress.org/changeset/41496"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-14723", "datePublished": "2017-09-23T20:00:00.000Z", "dateReserved": "2017-09-23T00:00:00.000Z", "dateUpdated": "2024-08-05T19:34:39.971Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C048B30-793C-4BDC-A2DE-6C87991205A4", "versionEndIncluding": "4.8.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Before version 4.8.2, WordPress mishandled % characters and additional placeholder values in $wpdb->prepare, and thus did not properly address the possibility of plugins and themes enabling SQL injection attacks."}, {"lang": "es", "value": "Antes de la versi\u00f3n 4.8.2, WordPress no gestionaba correctamente caracteres % y valores de sustituci\u00f3n adicionales en $wpdb->prepare, por lo que no abordaba correctamente la posibilidad de que los plugins o los temas permitiesen los ataques de inyecci\u00f3n SQL."}], "id": "CVE-2017-14723", "lastModified": "2026-05-13T00:24:29.033", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-09-23T20:29:00.420", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100912"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id/1039553"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://core.trac.wordpress.org/changeset/41470"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://core.trac.wordpress.org/changeset/41496"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e"}, {"source": "cve@mitre.org", "tags": ["Patch", "Release Notes", "Vendor Advisory"], "url": "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/"}, {"source": "cve@mitre.org", "url": "https://www.debian.org/security/2017/dsa-3997"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/100912"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id/1039553"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://core.trac.wordpress.org/changeset/41470"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://core.trac.wordpress.org/changeset/41496"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Mitigation", "Third Party Advisory"], "url": "https://medium.com/websec/wordpress-sqli-bbb2afcc8e94"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://medium.com/websec/wordpress-sqli-poc-f1827c20bf8e"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Release Notes", "Vendor Advisory"], "url": "https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.debian.org/security/2017/dsa-3997"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}]}