description: WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
vendor: WordPress Foundation
product: WordPress
versions:
version: *, status: affected, lessThanOrEqual: 4.1, versionType: semver
version: 4.1, status: affected, lessThan: 4.1.38, versionType: semver
version: 4.2, status: affected, lessThan: 4.2.35, versionType: semver
version: 4.3, status: affected, lessThan: 4.3.31, versionType: semver
version: 4.4, status: affected, lessThan: 4.4.30, versionType: semver
version: 4.5, status: affected, lessThan: 4.5.29, versionType: semver
version: 4.6, status: affected, lessThan: 4.6.26, versionType: semver
version: 4.7, status: affected, lessThan: 4.7.26, versionType: semver
version: 4.8, status: affected, lessThan: 4.8.22, versionType: semver
version: 4.9, status: affected, lessThan: 4.9.23, versionType: semver
version: 5.0, status: affected, lessThan: 5.0.19, versionType: semver
version: 5.1, status: affected, lessThan: 5.1.16, versionType: semver
version: 5.2, status: affected, lessThan: 5.2.18, versionType: semver
version: 5.3, status: affected, lessThan: 5.3.15, versionType: semver
version: 5.4, status: affected, lessThan: 5.4.13, versionType: semver
version: 5.5, status: affected, lessThan: 5.5.12, versionType: semver
version: 5.6, status: affected, lessThan: 5.6.11, versionType: semver
version: 5.7, status: affected, lessThan: 5.7.9, versionType: semver
version: 5.8, status: affected, lessThan: 5.8.7, versionType: semver
version: 5.9, status: affected, lessThan: 5.9.6, versionType: semver
version: 6.0, status: affected, lessThan: 6.0.4, versionType: semver
version: 6.1, status: affected, lessThan: 6.1.2, versionType: semver
version: 6.2, status: affected, lessThan: 6.2.1, versionType: semver
defaultStatus: unaffected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
baseScore: 5.4
baseSeverity: MEDIUM
]