CVE-2017-5491
wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.
Published: 2017-01-15 · CVSS: Unscored
wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7