CVE-2017-6514

score

<0.1

cvss

5.3

epss

3.0%

published

2019-05-22

kev added

—

first seen

2026-10-21

WordPress 4.7.2 contains a path disclosure caused by mishandling author listings in /wp-json/oembed/1.0/embed?url=, letting remote attackers obtain sensitive information, exploit requires sending a crafted request with 'author_name' substring.