CVE-2024-31211

CVE-2024-31211 affects WordPress via unserialization of WP_HTML_Token instances that enables code execution through the __destruct() method. Affected versions: prior to 6.4.0 are not affected; fixed in WordPress 6.4.2 (released 2023-12-06). Practical impact is Remote Code Execution; CVSS vectors ...