CVE-2024-32111 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress…
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6, from 6.0 through 6.0.8, from 5.9 through 5.9.9, from 5.8 through 5.8.9, from 5.7 through 5.7.11, from 5.6 through 5.6.13, from 5.5 through 5.5.14, from 5.4 through 5.4.15, from 5.3 through 5.3.17, from 5.2 through 5.2.20, from 5.1 through 5.1.18, from 5.0 through 5.0.21, from 4.9 through 4.9.25, from 4.8 through 4.8.24, from 4.7 through 4.7.28, from 4.6 through 4.6.28, from 4.5 through 4.5.31, from 4.4 through 4.4.32, from 4.3 through 4.3.33, from 4.2 through 4.2.37, from 4.1 through 4.1.40.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress 6.5 | 6.5 → 6.5.4 | No fix stated |
| WordPress 6.4 | 6.4 → 6.4.4 | No fix stated |
| WordPress 6.3 | 6.3 → 6.3.4 | No fix stated |
| WordPress 6.2 | 6.2 → 6.2.5 | No fix stated |
| WordPress 6.1 | 6.1 → 6.1.6 | No fix stated |
| WordPress 6.0 | 6.0 → 6.0.8 | No fix stated |
| WordPress 5.9 | 5.9 → 5.9.9 | No fix stated |
| WordPress 5.8 | 5.8 → 5.8.9 | No fix stated |
| WordPress 5.7 | 5.7 → 5.7.11 | No fix stated |
Show the 16 other branches Hide the 16 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress 5.6 | 5.6 → 5.6.13 | No fix stated |
| WordPress 5.5 | 5.5 → 5.5.14 | No fix stated |
| WordPress 5.4 | 5.4 → 5.4.15 | No fix stated |
| WordPress 5.3 | 5.3 → 5.3.17 | No fix stated |
| WordPress 5.2 | 5.2 → 5.2.20 | No fix stated |
| WordPress 5.1 | 5.1 → 5.1.18 | No fix stated |
| WordPress 5.0 | 5.0 → 5.0.21 | No fix stated |
| WordPress 4.9 | 4.9 → 4.9.25 | No fix stated |
| WordPress 4.8 | 4.8 → 4.8.24 | No fix stated |
| WordPress 4.7 | 4.7 → 4.7.28 | No fix stated |
| WordPress 4.6 | 4.6 → 4.6.28 | No fix stated |
| WordPress 4.5 | 4.5 → 4.5.31 | No fix stated |
| WordPress 4.4 | 4.4 → 4.4.32 | No fix stated |
| WordPress 4.3 | 4.3 → 4.3.33 | No fix stated |
| WordPress 4.2 | 4.2 → 4.2.37 | No fix stated |
| WordPress 4.1 | 4.1 → 4.1.40 | No fix stated |