[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3DXwp1Q4REJ29g34OAg9D6ib8RV-n_FYqgTIe0frb7w":3,"g5a-risk:CVE-2017-1001000":155},{"success":4,"data":5,"meta":153},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":106,"weaknesses":107,"weaknessesCount":111,"isActivelyExploited":112,"cisaInfo":15,"otxData":15,"relatedBlogPosts":113,"seoMetadata":114,"configurations":139,"relatedVendorCves":151,"notableEvents":152},"CVE-2017-1001000","What is CVE-2017-1001000?","The register_routes function in wp-includes\u002Frest-api\u002Fendpoints\u002Fclass-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identifier, which allows remote attackers to modify arbitrary pages via a request for wp-json\u002Fwp\u002Fv2\u002Fposts followed by a numeric value and a non-numeric value, as demonstrated by the wp-json\u002Fwp\u002Fv2\u002Fposts\u002F123?id=123helloworld URI.","The register_routes function in wp-includes\u002Frest-api\u002Fendpoints\u002Fclass-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not re...","2017-04-03T01:59:00.227","2025-04-20T01:37:25.86",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.84935,[39,39,39,39,39,39,39],"High",[43,47,50],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"wordpress","4.7","cpe:2.3:a:wordpress:wordpress:4.7:*:*:*:*:*:*:*",{"vendor":44,"product":44,"version":48,"criteria":49,"vulnerable":4},"4.7.1","cpe:2.3:a:wordpress:wordpress:4.7.1:*:*:*:*:*:*:*",{"vendor":44,"product":44,"version":51,"criteria":52,"vulnerable":4},"4.7.2","cpe:2.3:a:wordpress:wordpress:4.7.2:*:*:*:*:*:*:*",3,[55,59,63,67,71,75,79,82,85,88,90,92,94,96,98,100,102,104],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2017\u002F02\u002F10\u002F16","Openwall",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1037731","Securitytracker",[],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fblog.sucuri.net\u002F2017\u002F02\u002Fcontent-injection-vulnerability-wordpress-rest-api.html","Sucuri",[],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fblogs.akamai.com\u002F2017\u002F02\u002Fwordpress-web-api-vulnerability.html","Akamai",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fcodex.wordpress.org\u002FVersion_4.7.2","Wordpress",[],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fgist.github.com\u002Fleonjza\u002F2244eb15510a0687ed93160c623762ab","GitHub",[],{"url":80,"source":77,"tags":81},"https:\u002F\u002Fgithub.com\u002FWordPress\u002FWordPress\u002Fcommit\u002Fe357195ce303017d517aff944644a7a1232926f7",[],{"url":83,"source":73,"tags":84},"https:\u002F\u002Fmake.wordpress.org\u002Fcore\u002F2017\u002F02\u002F01\u002Fdisclosure-of-additional-security-fix-in-wordpress-4-7-2\u002F",[],{"url":86,"source":73,"tags":87},"https:\u002F\u002Fwordpress.org\u002Fnews\u002F2017\u002F01\u002Fwordpress-4-7-2-security-release\u002F",[],{"url":56,"source":57,"tags":89},[],{"url":60,"source":61,"tags":91},[],{"url":64,"source":65,"tags":93},[],{"url":68,"source":69,"tags":95},[],{"url":72,"source":73,"tags":97},[],{"url":76,"source":77,"tags":99},[],{"url":80,"source":77,"tags":101},[],{"url":83,"source":73,"tags":103},[],{"url":86,"source":73,"tags":105},[],18,[108],{"id":109,"name":109,"description":110},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":115,"metaDescription":116,"keywords":117,"canonicalUrl":118,"structuredData":119},"What is CVE-2017-1001000? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-1001000, a high severity cyber security vulnerability from 2017. High exploit probability (84.9%). The register_routes fun...","CVE-2017-1001000, CVE-2017-1001000 vulnerability, CVE-2017-1001000 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, wordpress security, wordpress vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2017-1001000",{"@context":120,"@type":121,"headline":115,"description":116,"datePublished":10,"dateModified":11,"author":122,"publisher":126,"about":130,"mainEntityOfPage":134,"articleSection":137,"keywords":138},"https:\u002F\u002Fschema.org","TechArticle",{"@type":123,"name":124,"url":125},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":123,"name":124,"url":125,"logo":127},{"@type":128,"url":129},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":131,"name":6,"description":132,"additionalType":133},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":135,"@id":136},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-1001000","Cybersecurity","CVE-2017-1001000, CVE-2017-1001000 vulnerability, CVE-2017-1001000 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[140],{"Operator":15,"Negate":15,"Nodes":141},[142],{"Operator":143,"Negate":15,"CPEMatch":144},"OR",[145,147,149],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"72ABC52C-7C28-4CB7-9432-38540152F3B5",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5B095729-5746-4E32-B857-7BC78962561C",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":150,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8459259A-4895-42B6-A242-D0B5871BE672",[],[],{"lastModified":11,"cacheTime":154,"version":32},1792276234055,{"score":156,"band":157,"action":158,"scoredAt":159},62,"Medium","Plan remediation","2026-10-17T08:29:30.002531+00:00"]