Vulnerability Database

296,822

Total vulnerabilities in the database

CVE-2014-5203

wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data.

Published: Aug 18, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-5203
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
WordPress / wordpress	3.9.0	3.9.0.x
WordPress / wordpress	3.9.1	3.9.1.x

http://openwall.com/lists/oss-security/2014/08/13/3
https://core.trac.wordpress.org/changeset/29389
https://wordpress.org/news/2014/08/wordpress-3-9-2/

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo