CVE-2024-4439

HIGH NUCLEI LAB

WordPress Core <6.5.2 - XSS

Title source: llm

Description

WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due to insufficient output escaping on the display name. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. In addition, it also makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that have the comment block present and display the comment author's avatar.

Exploits (5)

nomisec WORKING POC 10 stars
by d0rb · poc
https://github.com/d0rb/CVE-2024-4439
nomisec WORKING POC 2 stars
by MielPopsssssss · poc
https://github.com/MielPopsssssss/CVE-2024-4439
nomisec WRITEUP
by w0r1i0g1ht · poc
https://github.com/w0r1i0g1ht/CVE-2024-4439
nomisec WORKING POC
by soltanali0 · poc
https://github.com/soltanali0/CVE-2024-4439
nomisec WORKING POC
by xssor-dz · poc
https://github.com/xssor-dz/-CVE-2024-4439

Nuclei Templates (1)

WordPress Core <6.5.2 - Cross-Site Scripting
HIGHby nqdung2002

References (5)

Scores

CVSS v3 7.2
EPSS 0.9082
EPSS Percentile 99.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Lab Environment

COMMUNITY
Community Lab
docker pull wordpress:6.4.3
+2 more repos

Details

CWE
CWE-80
Status published
Products (1)
wordpress/wordpress 6.0 - 6.0.7
Published May 03, 2024
Tracked Since Feb 18, 2026