← Back to browse · API

CVE-2023-2745

Severity
MEDIUM
CVSS
5.4
EPSS
0.79527
Risk score
49.43
CISA KEV
No
PoC
No
Published
2023-05-17
Modified
2026-04-08
First seen
2026-08-07
Aliases
EUVD-2023-34206, GHSA-XGQR-2MPJ-W9QV
Products
WordPress Foundation:WordPress 0 <4.1.38, WordPress Foundation:WordPress 4.2 <4.2.35, WordPress Foundation:WordPress 4.3 <4.3.31, WordPress Foundation:WordPress 4.4 <4.4.30, WordPress Foundation:WordPress 4.5 <4.5.29, WordPress Foundation:WordPress 4.6 <4.6.26, WordPress Foundation:WordPress 4.7 <4.7.26, WordPress Foundation:WordPress 4.8 <4.8.22, WordPress Foundation:WordPress 4.9 <4.9.23, WordPress Foundation:WordPress 5.0 <5.0.19, WordPress Foundation:WordPress 5.1 <5.1.16, WordPress Foundation:WordPress 5.2 <5.2.18, WordPress Foundation:WordPress 5.3 <5.3.15, WordPress Foundation:WordPress 5.4 <5.4.13, WordPress Foundation:WordPress 5.5 <5.5.12, WordPress Foundation:WordPress 5.6 <5.6.11, WordPress Foundation:WordPress 5.7 <5.7.9, WordPress Foundation:WordPress 5.8 <5.8.7, WordPress Foundation:WordPress 5.9 <5.9.6, WordPress Foundation:WordPress 6.0 <6.0.4, WordPress Foundation:WordPress 6.1 <6.1.2, WordPress Foundation:WordPress 6.2 <6.2.1
Sources
euvd EUVD-2023-34206

Description

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.

References