Lucene search

[email protected]CVE-2023-2745

HistoryMay 17, 2023 - 9:15 a.m.

CVE-2023-2745

2023-05-1709:15:10

CWE-22

[email protected]

web.nvd.nist.gov

833

wordpress

core

directory traversal

vulnerability

cve-2023-2745

security

nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

5.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.9%

JSON

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.

Affected configurations

Vulners

NVD

Node

wordpresswordpressRange≤4.1

wordpresswordpressRange4.1–4.1.38

wordpresswordpressRange4.2–4.2.35

wordpresswordpressRange4.3–4.3.31

wordpresswordpressRange4.4–4.4.30

wordpresswordpressRange4.5–4.5.29

wordpresswordpressRange4.6–4.6.26

wordpresswordpressRange4.7–4.7.26

wordpresswordpressRange4.8–4.8.22

wordpresswordpressRange4.9–4.9.23

wordpresswordpressRange5.0–5.0.19

wordpresswordpressRange5.1–5.1.16

wordpresswordpressRange5.2–5.2.18

wordpresswordpressRange5.3–5.3.15

wordpresswordpressRange5.4–5.4.13

wordpresswordpressRange5.5–5.5.12

wordpresswordpressRange5.6–5.6.11

wordpresswordpressRange5.7–5.7.9

wordpresswordpressRange5.8–5.8.7

wordpresswordpressRange5.9–5.9.6

wordpresswordpressRange6.0–6.0.4

wordpresswordpressRange6.1–6.1.2

wordpresswordpressRange6.2–6.2.1

VendorProductVersionCPE
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::
wordpress	wordpress	*	cpe:2.3:a:wordpress:wordpress::::::::

Rows per page:

1-10 of 231

CNA Affected

[
  {
    "vendor": "WordPress Foundation",
    "product": "WordPress",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "4.1",
        "versionType": "semver"
      },
      {
        "version": "4.1",
        "status": "affected",
        "lessThan": "4.1.38",
        "versionType": "semver"
      },
      {
        "version": "4.2",
        "status": "affected",
        "lessThan": "4.2.35",
        "versionType": "semver"
      },
      {
        "version": "4.3",
        "status": "affected",
        "lessThan": "4.3.31",
        "versionType": "semver"
      },
      {
        "version": "4.4",
        "status": "affected",
        "lessThan": "4.4.30",
        "versionType": "semver"
      },
      {
        "version": "4.5",
        "status": "affected",
        "lessThan": "4.5.29",
        "versionType": "semver"
      },
      {
        "version": "4.6",
        "status": "affected",
        "lessThan": "4.6.26",
        "versionType": "semver"
      },
      {
        "version": "4.7",
        "status": "affected",
        "lessThan": "4.7.26",
        "versionType": "semver"
      },
      {
        "version": "4.8",
        "status": "affected",
        "lessThan": "4.8.22",
        "versionType": "semver"
      },
      {
        "version": "4.9",
        "status": "affected",
        "lessThan": "4.9.23",
        "versionType": "semver"
      },
      {
        "version": "5.0",
        "status": "affected",
        "lessThan": "5.0.19",
        "versionType": "semver"
      },
      {
        "version": "5.1",
        "status": "affected",
        "lessThan": "5.1.16",
        "versionType": "semver"
      },
      {
        "version": "5.2",
        "status": "affected",
        "lessThan": "5.2.18",
        "versionType": "semver"
      },
      {
        "version": "5.3",
        "status": "affected",
        "lessThan": "5.3.15",
        "versionType": "semver"
      },
      {
        "version": "5.4",
        "status": "affected",
        "lessThan": "5.4.13",
        "versionType": "semver"
      },
      {
        "version": "5.5",
        "status": "affected",
        "lessThan": "5.5.12",
        "versionType": "semver"
      },
      {
        "version": "5.6",
        "status": "affected",
        "lessThan": "5.6.11",
        "versionType": "semver"
      },
      {
        "version": "5.7",
        "status": "affected",
        "lessThan": "5.7.9",
        "versionType": "semver"
      },
      {
        "version": "5.8",
        "status": "affected",
        "lessThan": "5.8.7",
        "versionType": "semver"
      },
      {
        "version": "5.9",
        "status": "affected",
        "lessThan": "5.9.6",
        "versionType": "semver"
      },
      {
        "version": "6.0",
        "status": "affected",
        "lessThan": "6.0.4",
        "versionType": "semver"
      },
      {
        "version": "6.1",
        "status": "affected",
        "lessThan": "6.1.2",
        "versionType": "semver"
      },
      {
        "version": "6.2",
        "status": "affected",
        "lessThan": "6.2.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]