CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
What the vulnerability does
WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.
Explanation of Vulnerability in Simple Terms
WordPress versions before 4.1.38 contain a path traversal vulnerability that allows an attacker to read files outside the intended directory. The vulnerability requires specific network conditions to exploit but does not require authentication or user interaction. An attacker can access sensitive files and potentially modify content on the affected site.
What an attacker can do
Read files outside the intended directory and potentially modify site content.
Potential impact on your site
Sensitive files may be exposed; site content could be altered without authorization.
Conditions required to exploit
Network access to the WordPress site; specific network conditions required (high attack complexity).
Key dates
External resources
Related vulnerabilities
