WordPress Core 6.2 - Directory Traversal

Exploit Title: WordPress Core 6.2 - Directory Traversal Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Version: = 6.2 Tested on: Win, Ubuntu CVE : CVE-2023-2745 import requests from colorama import init,...

Debian dsa-5685 : wordpress - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5685 advisory. - WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the wplang' parameter. This allows unauthenticated attackers...

[SECURITY] [DSA 5685-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5685-1 [email protected] https://www.debian.org/security/ Markus Koschany May 08, 2024 https://www.debian.org/security/faq -...

Debian dla-3462 : wordpress - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3462 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3462-1 [email protected] https://www.debian.org/lts/security/...

CVE-2023-2745

creationtimestamp| type| source ---|---|--- 2023-05-17 12:31:07+00:00| seen| https://t.me/cibsecurity/64301 2024-06-15 15:16:47+00:00| published-proof-of-concept| Telegram/kSgfd90HLDeLdMdtqrKeKRfN1NKozSXE6QwhczfIL3pl2QOs 2025-04-23 21:02:23+00:00| seen|...

CVE-2023-2745

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wplang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such ...

CVE-2023-2745

CVE-2023-2745 — WordPress Core

WordPress is vulnerable to Directory Traversal

Software WordPress Type WordPress Core Vulnerable versions = 6.2 Fixed in 6.2.1 OWASP Top 10 A1: Injection Classification Directory Traversal CVE CVE-2023-2745 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 0d1028dd7204 Credits Ramuel Gall Wordfence Required privile...