CVE-2014-5203 | Vulnetix

CVE-2014-5203 PUBLISHED CVSS 7.5 HIGH

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.

EPSS 3.89% · 90.1th percentile

Risk Scores

CVSS 2.0

7.5

EPSS Score

3.89%

90.1th percentile

Affected Products

Vendor	Product	Versions
wordpress	wordpress	3.9.0, 3.9.1
n/a	n/a	*

Timeline

Aug 18, 2014 CVE Published
Feb 4, 2022 EPSS Score
Mar 29, 2022 EPSS Score
Jul 13, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Dec 19, 2022 EPSS Score
Feb 10, 2023 EPSS Score
Apr 4, 2023 EPSS Score
May 27, 2023 EPSS Score
Sep 10, 2023 EPSS Score
Nov 2, 2023 EPSS Score
Dec 25, 2023 EPSS Score

References

https://wordpress.org/news/2014/08/wordpress-3-9-2/ url
https://core.trac.wordpress.org/changeset/29389 url
[oss-security] 20140813 Re: WordPress 3.9.2 release - needs CVE's mailing-list
https://nvd.nist.gov/vuln/detail/CVE-2014-5203 advisory
https://wordpress.org/news/2014/08/wordpress-3-9-2 url

Open in Interactive Console →