VDB
CVE-2023-2745
CVE-2023-2745
PUBLISHED
CVSS 6.099999904632568 MEDIUM
WordPress Core < 6.2.1 - Directory Traversal
EPSS 79.39% · 99.6th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
79.39%
99.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | wordpress | 4.2.0, 4.3.0, 4.4.0 |
| Bitnami | wordpress-multisite | 5.2.0, 0, 4.2.0 |
| Bitnami | wordpress | 4.4.0, 4.5.0, 4.6.0 |
| Bitnami | wordpress-multisite | 0, 4.3.0, 4.4.0 |
Timeline
- May 16, 2023 CVE Published
- May 17, 2023 PoC Published
- May 18, 2023 EPSS Score
- May 19, 2023 PoC Published
- Jun 15, 2024 PoC Published
- Aug 10, 2024 Nuclei Template
- Aug 10, 2024 Fix Commit
- Mar 17, 2025 EPSS Score
- Mar 23, 2025 EPSS Score
- Mar 25, 2025 EPSS Score
- Mar 27, 2025 EPSS Score
- Apr 15, 2025 EPSS Score
References
- Nuclei Template exploit
- https://wordpress.org/news/2023/05/wordpress-6-2-1-maintenance-security-release/ url
- https://www.exploit-db.com/exploits/52274 exploit
- https://www.wordfence.com/threat-intel/vulnerabilities/id/edcf46b6-368e-49c0-b2c3-99bf6e2d358f?source=cve url
- https://lists.debian.org/debian-lts-announce/2023/06/msg00024.html advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-2745 url
- http://packetstormsecurity.com/files/172426/WordPress-Core-6.2-XSS-CSRF-Directory-Traversal.html exploit
- https://core.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=55765%40%2F&new=55765%40%2F&sfp_email=&sfph_mail= url
- https://www.wordfence.com/blog/2023/05/wordpress-core-6-2-1-security-maintenance-release-what-you-need-to-know/ url