CVE-2017-1001000

CVE-2017-1001000 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Marc Montpas, wvu, including a Metasploit module auxiliary/scanner/http/wordpress_content_injection.

AI-analyzed exploit summary This Metasploit module exploits a content injection vulnerability in WordPress 4.7 and 4.7.1 via type juggling in the REST API. It allows listing and updating posts without authentication.

The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identifier, which allows remote attackers to modify arbitrary pages via a request for wp-json/wp/v2/posts followed by a numeric value and a non-numeric value, as demonstrated by the wp-json/wp/v2/posts/123?id=123helloworld URI.