Wordpress » Wordpress : Security Vulnerabilities Published In 2016 (Bypass)

Published in:

2016 January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Publish Date Update Date CVE Number CVE Number CVSS Score EPSS Score

CVE-2016-4029

WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass an intended SSRF protection mechanism via a crafted address.

Max Base Score	8.6
Published	2016-08-07
Updated	2017-11-04
EPSS	0.33%

1 vulnerabilities found