Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php and wp-admin/widgets.php.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 15, 2017 |
| Debian | — | Upgrade wordpress | Feb 2, 2017 | Jan 14, 2017 |
| Freebsd | — | Upgrade ru-wordpressUpgrade zh-wordpress-zh_CNUpgrade ja-wordpressUpgrade de-wordpressUpgrade zh-wordpress-zh_TWUpgrade wordpress | Jan 15, 2017 | Jan 15, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 15, 2017 |
| Wordpress | — | Upgrade Wordpress to version 4.7.1 | May 16, 2017 | Jan 14, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub