UNDERSTANDING WORDPRESS CVE-2019-17669
3
Introduction:
A critical vulnerability is seen in WordPress till 5.2.3. The affected thing was an unknown
functionality related to a component URL Handler. Further, the manipulation with unknown input
gives rise to the SSRF or privilege escalation vulnerability. The CWE has been categorization the
problem as CWE-918. It is going to have an effect on availability, integrity and confidentiality. This
weakness has been shown during 10/17/2019. The vulnerability has been traded as the CVE-109-
1669 FROM 10/1/2019. This exportability has been revealed to be simple. An attack can be
launched here remotely. Moreover, exploitation has never needed any type of authentication. Again,
the technical details have been unknown and the exploit has never been available. Here, the structure
of that vulnerably has been defining the probable price range of 0 to 5k USD dollars at that time.
This up-gradation to version 5.2.4 eradicates the vulnerability. The following report describes the
different critical problems along with the business or technical issues for CVE-2019-17669.
Moreover, its future potentials are also discussed in this evaluation.
Description of Wordpress:
The WordPress is a popular free content management system. This is utilized for creating
and maintaining different websites. It is easy to use and has distinct features of blogging. This helps
become the most popular tool for blogging over the Internet. It delivers the web-based user interface
to update, publish and design sites (Rodas-Silva et al. 2019). Rather than writing in HTML, one
might easily opt for various templates or theme over the websites consisting of the designs liked by
users. Moreover, one can change the layout and create any custom bar for navigation. As the layout
of the site is finished, one can utilize the online interface of WordPress for generating individual
pages. Every page comprises of formatted texts, images, links and additional media (Messenlehner
and Coleman 2019). One is able to publish the webpages completed or updates of blogs through a

+13062052269

info@desklib.com

International Conference on Data and Software Engineering

Contribute Materials