← Back to CVE List

CVE-2017-9064

Published: 2017-05-18T14:29Z
Last Modified: 2024-11-21T03:35Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is not required for updating credentials. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt