CVE-2017-5489
Summary
by MITRE
Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash file upload.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 05/13/2026
Xxx Xxx-xxxx-xxxx Xxxxxxxxxxxxx Xxxxxxxxxx X Xxxxxxxx Xxxxx-xxxx Xxxxxxx Xxxxxxx Xxxx Xx Xxxxxxxxx Xxxxxxxx Xxxxx Xx X.x.x Xxxx Xxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxx Xxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxx Xxxx Xxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxx Xxxxxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxx Xxxxx Xxxxxxxxxxxxxx Xxxxxxxxxx Xxx Xx Xxxxxxxxxxx Xx Xxxxxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxx Xxxxxxx Xx Xxxxxx Xx Xxxxxxxxxx Xxxxx. Xxx Xxxx Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xxxxx Xxxx Xxxxxx Xxxxxxxxxxxxx Xxx Xxxxxxxxx'x Xxxx Xxxxxxxxxx Xxxxxxxxxx, Xxxxxxxx X Xxxxxxx Xxx Xxxxxxxxx Xx Xxxxxx Xxxxxxxx Xxxxxxxx Xxxx Xxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxxx'x Xxxxxxxxxxxx Xxxxxxxxxx Xx Xxxx Xxxxxx Xxxx Xxxxxxxxxx Xxxxx Xxxx Xxxxxxx Xxxxxxx Xxx Xxxxx Xxxxxxxx Xxxxxx. Xxxx Xxxxx Xxxxxx Xxxxx Xxxxx Xx Xxxxxxxxx Xxxxx, Xxx Xxxxxxxxxxx Xxxxx Xx Xxxxxxxx Xxxxxx Xxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxx Xx Xxxxxxxxxxxxx Xxxx Xxxx Xxxxx Xxxxxxxxxxx, Xxxxxxxx Xxxxxxxxx Xx Xxxxx Xxxxxxxxx Xxxxxxxx Xxxx Xxxxxx Xx Xxxx Xxxx Xxxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx. Xxxx Xxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxxxxx'x Xxxxxxx Xx Xxxxxxx Xxxxxx Xxxxxxx Xxxxxx Xxxxxxxx Xxx Xxxxx Xxxxxxxxxx Xxxxxx Xxxx Xxxxxx Xxxxxxxxxx, Xxxxxxxxxxxx Xxxxx Xxxxxxxxx Xxxxx Xxxxxxx Xxxxx Xxx Xxx Xx Xxxxxxx Xx Xxx Xxxx Xxxxxxxx Xxxxxxxxxxxx Xx Xxxxx Xxxx Xxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxxxxx X Xxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxxxxx'x Xxxxxxxx Xxxxx Xxxxx Xxx Xxxx Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx Xxxxxxxxxxxx Xxxxxxx Xxxxxx Xxx Xxxx Xxxxxxxxxxx Xxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxx-xxxx-xxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxxxxxxxx Xxxx Xxxxxxx Xx Xxxxxxxxxxx Xxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx. Xxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxxxxxx Xx Xxxxxxxxxx Xxxxxxx, Xxxxxx Xxxxxxx Xxxxxxx, Xxxxxxx Xxxxxxxxx Xxxxxxx, Xx Xxxx Xxxx Xxxx Xxxxxxx Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxxx. Xxx Xxxxx Xxxx Xxxxxx Xxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxxx Xxxxxxx Xxxxx Xxxxxxx Xxxxx Xxxxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxx Xxx Xx Xxxxxxxx Xxxxxxxxx Xx Xxxxxxxxx'x Xxxxxxx Xxxxxxxxx Xxxxxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxx X Xxxx Xxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxx Xxx Xxxxxxxxxx X Xxxxxxxxxxx Xxxx Xx Xxxxxxxx Xxxx Xx Xxx Xxxxxxxx Xx-xx-xxxx Xxxxxxxx Xxxxxxx, Xx Xxx Xxxxxx Xxx Xx Xxxxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx Xx Xxxxxx Xx Xxx Xxxxxx Xxxxxx Xxxxxx Xxxxx Xxxxxxx Xxxxxxxxxxxx.
Xxxxxxxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxx Xxxxxxx Xxxxxxxx Xx Xxxxxxxxx Xxxxxxx X.x.x Xx Xxxxx, Xxxxx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxxx Xx Xxxxxxx Xxx Xxxx Xxxxxxxxxx Xxxx. Xxxxxxxx Xxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxxxx Xxxxxxx-xxxxx Xxxxxxxxxxx Xxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxxx Xxxx Xxx Xxxxxx Xxx Xxxxx Xxxxxxxxx Xxxxx Xxxx Xxxxxx Xxxxxxxx, Xxxxx Xxxx Xxxxxxx Xxxxxxxx Xxxxxx Xx Xxxxxxxx Xxxxxxx Xx Xxxxxxxx Xxx Xxxxxxxxxx Xxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxx Xxxx Xxx-xxx, Xxxxx Xxxxxxxxxxxx Xxxxxxxxx Xxxxx-xxxx Xxxxxxx Xxxxxxx Xxxxxxxxxx Xx Xxx Xxxxxxxxxxxx, Xxx Xxxxxxxxxx X Xxxxxx Xxxxxxx Xx Xxxxxxxx Xxxxx Xxxx Xxxxxxxxx Xxxxxxx Xx Xxxx Xxxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxx. Xxxx Xx Xxx&xx Xxxxxxxxx Xxxxxxxxxxx, Xxxx Xxxxxxxxxxxxx Xxxx Xx Xxx Xxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxxx Xxxx Xxxxxxxxxxx Xxx Xx Xxxxxxxx Xxxx-xxxx Xxxxxx Xx Xxxxxxxxxxx Xxxxxxx, Xxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxxxxx Xxxx Xxxx Xx Xxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxxx Xxxxxxxxxx.