CVE-2023-2745

MEDIUM NUCLEI

Wordpress < 4.1.38 - Path Traversal

Title source: rule

Description

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation files. In cases where an attacker is able to upload a crafted translation file onto the site, such as via an upload form, this could be also used to perform a Cross-Site Scripting attack.

Exploits (2)

exploitdb WORKING POC
by Milad karimi · pythonwebappsphp
https://www.exploit-db.com/exploits/52274
nomisec SCANNER
by fofovicfof-ai · poc
https://github.com/fofovicfof-ai/cve-2023-2745

Nuclei Templates (1)

WordPress Core <=6.2 - Directory Traversal
MEDIUMby nqdung2002

References (7)

Scores

CVSS v3 5.4
EPSS 0.7748
EPSS Percentile 99.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Details

CWE
CWE-22
Status published
Products (24)
wordpress/wordpress 6.2
wordpress/wordpress < 4.1.38
WordPress Foundation/WordPress < 4.1.38
WordPress Foundation/WordPress 4.2 - 4.2.35
WordPress Foundation/WordPress 4.3 - 4.3.31
WordPress Foundation/WordPress 4.4 - 4.4.30
WordPress Foundation/WordPress 4.5 - 4.5.29
WordPress Foundation/WordPress 4.6 - 4.6.26
WordPress Foundation/WordPress 4.7 - 4.7.26
WordPress Foundation/WordPress 4.8 - 4.8.22
... and 14 more
Published May 17, 2023
Tracked Since Feb 18, 2026