Описание
WordPress Core is vulnerable to Directory Traversal in various versions up to 6.5.5 via the Template Part block. This makes it possible for authenticated attackers, with Contributor-level access and above, to include arbitrary HTML Files on sites running Windows.
WordPress Core is vulnerable to Directory Traversal in various versions up to 6.5.5 via the Template Part block. This makes it possible for authenticated attackers, with Contributor-level access and above, to include arbitrary HTML Files on sites running Windows.
4.3 Medium
CVSS3
CVE ID
Связанные уязвимости
nvd
около 2 лет назад
Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-32111.
4.3 Medium
CVSS3