blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2017-20177

MEDIUM 6.1 CVSS 3.1
Published
February 6, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
cna@vuldb.com
Weakness
CWE-79
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A vulnerability, which was classified as problematic, has been found in WangGuard Plugin 1.8.0 on WordPress. Affected by this issue is the function wangguard_users_info of the file wangguard-user-info.php of the component WGG User List Handler. The manipulation of the argument userIP leads to cross site scripting. The attack may be launched remotely. The patch is identified as 88414951e30773c8d2ec13b99642688284bf3189. It is recommended to apply a patch to fix this issue. VDB-220214 is the identifier assigned to this vulnerability.

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • n/a WangGuard Plugin — Version 1.8.0
  • wangguard_project wangguard — Version 1.8.0

References

  • github.com https://github.com/joseconti/WangGuard/commit/88414951e30773c8d2ec13b99642688284bf3189 Patch
  • github.com https://github.com/joseconti/WangGuard/pull/14 Issue Tracking, Patch
  • vuldb.com https://vuldb.com/?ctiid.220214 Permissions Required, Third Party Advisory
  • vuldb.com https://vuldb.com/?id.220214 Third Party Advisory
  • nvd.nist.gov Official NVD record