CVE-2017-14719: WordPress

High severity, CVSS 7.5. EPSS: 12.4% chance of exploitation in the next 30 days.

Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.

Affected products

• WordPress WordPress: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.0.5 only; …

Published 2017-09-23. Last modified 2026-06-17.