Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path Disclosure) via a /wp-json/oembed/1.0/embed?url= request, related to the "author_name":" substring.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Cytellite recent detection targeting CVE-2017-6514 — Limited Network LTD Visit -- https://cti.loginsoft.com/ip/185.93.89.100 #Loginsoft #Cytellite #Cybersecurity #CVE20176514 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/7SKp3ah2Yj
Post summary
Cytellite reports recent detection of attacks using CVE-2017-6514, indicating the vulnerability is actively exploited in the wild.
Cytellite recent detection targeting CVE-2017-6514 — Limited Network LTD Visit -- https://cti.loginsoft.com/ip/185.93.89.100 #Loginsoft #Cytellite #Cybersecurity #CVE20176514 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/QS0Ysf0Jku
Post summary
The tweet reports a recent detection of threat activity targeting CVE-2017-6514, suggesting the vulnerability is being exploited in the wild, but it provides no PoC, patch, or technical details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wordpress | wordpress | 4.7.2 | - | - |