CVE-2014-5203 — Vulnetix

CVE-2014-5203 PUBLISHED CVSS 7.5 HIGH

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.

EPSS 6.91% · 91.6th percentile

Risk Scores

CVSS 2.0

7.5

EPSS Score

6.91%

91.6th percentile

Affected Products

Vendor	Product	Versions
wordpress	wordpress	3.9.0, 3.9.1
n/a	n/a	*

Timeline

Aug 18, 2014 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 12, 2022 EPSS Score
Sep 3, 2022 EPSS Score
Dec 18, 2022 EPSS Score
Feb 8, 2023 EPSS Score
Apr 2, 2023 EPSS Score
May 25, 2023 EPSS Score
Sep 7, 2023 EPSS Score
Oct 29, 2023 EPSS Score
Dec 21, 2023 EPSS Score

References

https://wordpress.org/news/2014/08/wordpress-3-9-2/ url
https://core.trac.wordpress.org/changeset/29389 url
[oss-security] 20140813 Re: WordPress 3.9.2 release - needs CVE's mailing-list
https://nvd.nist.gov/vuln/detail/CVE-2014-5203 advisory
https://wordpress.org/news/2014/08/wordpress-3-9-2 url

Open in Interactive Console →