Threats tagged 'bit-wordpress-2024-31211'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	–	EPSS 2.8%	CVE-2024-31211Wordpress · Remote Code Execution in `WP_HTML_Token` CriticalEPSS 2.8%2024-04-06GCVE DatabaseCVE-2024-31211 A critical remote code execution vulnerability exists in WordPress due to unsafe unserialization of WP_HTML_Token class instances via its __destruct() method. This flaw affects WordPress versions from 6.4.0 up to but not including 6.4.2. The issue was fixed in WordPress 6.4.2 released on December 6th, 2023. EPSS 2.8%Vulnerability #bit-wordpress-2024-31211 #bitnami	GCVE Database	2024-04-06

Page 1 of 1