CVE-2017-5611

Fixed in a distro release EPSS 10%

SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.

Published 2017-01-30 · CVE record · OSV

Products: wordpress, debian_linux, oracle data_integrator

Distro releases