WordPress Vulnerabilities

WordPress 3.0-4.7 - Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Affects WordPress

3.8.1
Fixed in WordPress 3.8.17
3.8
Fixed in WordPress 3.8.17
3.7.1
Fixed in WordPress 3.7.17
3.6
Fixed in WordPress 4.7.1
3.5.2
Fixed in WordPress 4.7.1
3.5.1
Fixed in WordPress 4.7.1
3.5
Fixed in WordPress 4.7.1
3.4.2
Fixed in WordPress 4.7.1
3.4.1
Fixed in WordPress 4.7.1
3.4
Fixed in WordPress 4.7.1
3.3.3
Fixed in WordPress 4.7.1
3.3.2
Fixed in WordPress 4.7.1
3.3.1
Fixed in WordPress 4.7.1
3.3
Fixed in WordPress 4.7.1
3.2.1
Fixed in WordPress 4.7.1
3.2
Fixed in WordPress 4.7.1
3.1.4
Fixed in WordPress 4.7.1
3.1.3
Fixed in WordPress 4.7.1
3.1.2
Fixed in WordPress 4.7.1
3.1.1
Fixed in WordPress 4.7.1
3.1
Fixed in WordPress 4.7.1
3.0.6
Fixed in WordPress 4.7.1
3.0.5
Fixed in WordPress 4.7.1
3.0.4
Fixed in WordPress 4.7.1
3.0.3
Fixed in WordPress 4.7.1
3.0.2
Fixed in WordPress 4.7.1
3.0.1
Fixed in WordPress 4.7.1
3.0
Fixed in WordPress 4.7.1
3.6.1
Fixed in WordPress 4.7.1
3.9
Fixed in WordPress 3.9.15
3.9.1
Fixed in WordPress 3.9.15
3.7
Fixed in WordPress 3.7.17
3.8.2
Fixed in WordPress 3.8.17
3.8.3
Fixed in WordPress 3.8.17
3.9.2
Fixed in WordPress 3.9.15
4.0
Fixed in WordPress 4.0.14
4.1
Fixed in WordPress 4.1.14
4.1.1
Fixed in WordPress 4.1.14
4.2
Fixed in WordPress 4.2.11
3.9.3
Fixed in WordPress 3.9.15
4.1.2
Fixed in WordPress 4.1.14
4.2.1
Fixed in WordPress 4.2.11
4.0.1
Fixed in WordPress 4.0.14
4.1.5
Fixed in WordPress 4.1.14
4.1.4
Fixed in WordPress 4.1.14
4.1.3
Fixed in WordPress 4.1.14
3.8.4
Fixed in WordPress 3.8.17
3.7.4
Fixed in WordPress 3.7.17
4.2.3
Fixed in WordPress 4.2.11
3.8.8
Fixed in WordPress 3.8.17
3.8.5
Fixed in WordPress 3.8.17
3.8.6
Fixed in WordPress 3.8.17
3.8.7
Fixed in WordPress 3.8.17
3.7.2
Fixed in WordPress 3.7.17
3.7.3
Fixed in WordPress 3.7.17
3.7.5
Fixed in WordPress 3.7.17
3.7.6
Fixed in WordPress 3.7.17
3.7.7
Fixed in WordPress 3.7.17
3.7.8
Fixed in WordPress 3.7.17
3.7.9
Fixed in WordPress 3.7.17
3.8.9
Fixed in WordPress 3.8.17
3.9.4
Fixed in WordPress 3.9.15
3.9.5
Fixed in WordPress 3.9.15
3.9.6
Fixed in WordPress 3.9.15
3.9.7
Fixed in WordPress 3.9.15
4.0.2
Fixed in WordPress 4.0.14
4.0.3
Fixed in WordPress 4.0.14
4.0.4
Fixed in WordPress 4.0.14
4.0.5
Fixed in WordPress 4.0.14
4.0.6
Fixed in WordPress 4.0.14
4.1.6
Fixed in WordPress 4.1.14
4.2.2
Fixed in WordPress 4.2.11
4.2.4
Fixed in WordPress 4.2.11
4.1.7
Fixed in WordPress 4.1.14
4.0.7
Fixed in WordPress 4.0.14
3.9.8
Fixed in WordPress 3.9.15
3.8.10
Fixed in WordPress 3.8.17
3.7.10
Fixed in WordPress 3.7.17
4.3
Fixed in WordPress 4.3.7
4.3.1
Fixed in WordPress 4.3.7
4.2.5
Fixed in WordPress 4.2.11
4.1.8
Fixed in WordPress 4.1.14
4.0.8
Fixed in WordPress 4.0.14
3.9.9
Fixed in WordPress 3.9.15
3.8.11
Fixed in WordPress 3.8.17
3.7.11
Fixed in WordPress 3.7.17
4.4
Fixed in WordPress 4.4.6
3.7.12
Fixed in WordPress 3.7.17
3.8.12
Fixed in WordPress 3.8.17
3.9.10
Fixed in WordPress 3.9.15
4.0.9
Fixed in WordPress 4.0.14
4.1.9
Fixed in WordPress 4.1.14
4.2.6
Fixed in WordPress 4.2.11
4.3.2
Fixed in WordPress 4.3.7
4.4.1
Fixed in WordPress 4.4.6
4.4.2
Fixed in WordPress 4.4.6
4.3.3
Fixed in WordPress 4.3.7
4.2.7
Fixed in WordPress 4.2.11
4.1.10
Fixed in WordPress 4.1.14
4.0.10
Fixed in WordPress 4.0.14
3.9.11
Fixed in WordPress 3.9.15
3.8.13
Fixed in WordPress 3.8.17
3.7.13
Fixed in WordPress 3.7.17
4.5
Fixed in WordPress 4.5.5
4.5.1
Fixed in WordPress 4.5.5
3.7.14
Fixed in WordPress 3.7.17
3.8.14
Fixed in WordPress 3.8.17
3.9.12
Fixed in WordPress 3.9.15
4.0.11
Fixed in WordPress 4.0.14
4.1.11
Fixed in WordPress 4.1.14
4.2.8
Fixed in WordPress 4.2.11
4.3.4
Fixed in WordPress 4.3.7
4.4.3
Fixed in WordPress 4.4.6
4.5.2
Fixed in WordPress 4.5.5
4.5.3
Fixed in WordPress 4.5.5
3.7.15
Fixed in WordPress 3.7.17
3.8.15
Fixed in WordPress 3.8.17
3.9.13
Fixed in WordPress 3.9.15
4.0.12
Fixed in WordPress 4.0.14
4.1.12
Fixed in WordPress 4.1.14
4.2.9
Fixed in WordPress 4.2.11
4.3.5
Fixed in WordPress 4.3.7
4.4.4
Fixed in WordPress 4.4.6
4.6
Fixed in WordPress 4.6.2
3.7.16
Fixed in WordPress 3.7.17
3.8.16
Fixed in WordPress 3.8.17
3.9.14
Fixed in WordPress 3.9.15
4.0.13
Fixed in WordPress 4.0.14
4.1.13
Fixed in WordPress 4.1.14
4.2.10
Fixed in WordPress 4.2.11
4.3.6
Fixed in WordPress 4.3.7
4.4.5
Fixed in WordPress 4.4.6
4.5.4
Fixed in WordPress 4.5.5
4.6.1
Fixed in WordPress 4.6.2
4.7
Fixed in WordPress 4.7.1

References

CVE
CVE-2017-5493
URL
https://github.com/WordPress/WordPress/commit/cea9e2dc62abf777e06b12ec4ad9d1aaa49b29f4
URL
https://wordpress.org/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
3e355742-6069-4d5d-9676-613df46e8c54

Timeline

Publicly Published
2017-01-11 (about 7 years ago)
Added
2017-01-12 (about 7 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2024-04-05
Title
Demo My WordPress < 1.1.0 - Unauthenticated Privilege Escalation
Published
2018-06-27
Title
WordPress <= 4.9.6 - Authenticated Arbitrary File Deletion
Published
2023-05-11
Title
Announcement & Notification Banner – Bulletin < 3.7.0 - Subscriber+ Unauthorized Access and Modification
Published
2014-08-01
Title
WP-Filebase 0.2.9.24- Unspecified Vulnerabilities
Published
2023-05-30
Title
Feather Login Page < 1.1.2 - Missing Authorization to Authentication Bypass and Privilege Escalation