Base Score

MEDIUM4.9

CVE-2017-6816

In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.

VectorNETWORK

Published Bycve@mitre.org

Published DateMar 12, 2017, 01:59

Weakness Type (CWE):CWE-863

CVSS Metrics

Base Score

4.9

Vector String

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

HIGH

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE

References

http://www.debian.org/security/2017/dsa-3815
http://www.securityfocus.com/bid/96598
http://www.securitytracker.com/id/1037959
https://codex.wordpress.org/Version_4.7.3
https://github.com/WordPress/WordPress/commit/4d80f8b3e1b00a3edcee0774dc9c2f4c78f9e663
https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
https://wpvulndb.com/vulnerabilities/8767

Base Score

MEDIUM4.9

Weakness Type (CWE):CWE-863

CVSS Metrics

Base Score

4.9

Vector String

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.0

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

HIGH

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE