CVE-2024-6305

mediumrejectedpriority · track · 0DENL

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

CVSS 6.4 · medium

Is it mine?

17 products

Who says so?

3 sources

enisa_euvd · cert_bund · ncsc_nl

Rejected reason: **REJECT** Accidental Reservation making this a duplicate. Please use CVE-2024-31111.

cvss

Technical severity, 0–10. One row per scoring source.

6.4

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:Nsecondary · NCSC-NL NL

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Open Source WordPress <6.5.5all versionscert_bundDE
Open Source WordPress< 6.5.5cert_bundDE
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.0.8:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.0:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.1.6:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.1:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.2.5:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.2:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.3.4:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.3:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.4.4:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.4:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.5.4:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:6.5:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:5.9.9:*:*:*:*:*:*:*
wordpressall versionsncsc_nlNLcpe:2.3:a:wordpress_foundation:wordpress:5.9:*:*:*:*:*:*:*

Vendor and ecosystem advisories describing this.

NCSC-2024-0266Kwetsbaarheden verholpen in WordPressNL2024-06-25csaf · ncsc_nlNL
De ontwikkelaars van WordPress hebben kwetsbaarheden verholpen in WordPress.
WID-SEC-W-2024-1454WordPress: Mehrere SchwachstellenDeutsch2024-06-25csaf · cert_bundDE
Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder Dateien zu manipulieren.

Other names and identifiers for this entity.

Which sources assert this record, and when.

published 2024-06-25modified 2024-06-25

External citations — patches, advisories, analysis.

No references recorded.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.