CVE-2017-14766

Name: CVE-2017-14766
Creator: NVD / NIST
Published: 2017-09-27T08:29:00.547+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.80%

Last modified Jun 17, 2026

CVE-2017-14766 is a vulnerability of currently unknown severity. The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.. EPSS estimates a 1.80% chance of exploitation in the next 30 days.

Description

The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.

Metrics

EPSS Probability

1.80%

75.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-287

Affected Software

Vendor	Product	Versions
Saadamin	Simple Student Result	<= 1.6.3

References

https://limbenjamin.com/articles/simple-student-result-auth-bypass.htmlExploit, Third Party Advisory
https://wordpress.org/plugins/simple-student-result/#developersRelease Notes, Third Party Advisory
https://wpvulndb.com/vulnerabilities/8920Exploit, Third Party Advisory
https://limbenjamin.com/articles/simple-student-result-auth-bypass.htmlExploit, Third Party Advisory
https://wordpress.org/plugins/simple-student-result/#developersRelease Notes, Third Party Advisory
https://wpvulndb.com/vulnerabilities/8920Exploit, Third Party Advisory

Timeline

Published: Sep 27, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-14766?

How severe is CVE-2017-14766?

Severity scoring for CVE-2017-14766 is pending analysis. The EPSS model estimates a 1.80% probability of exploitation in the next 30 days.

How do I fix CVE-2017-14766?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-14766?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST