CVE-2024-32111

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Jun 25, 2024
Source updated: Apr 28, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

WordPress core < 6.5.5 - Auth. Arbitrary .html File Read (Windows Only) vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6, from 6.0 through 6.0.8, from 5.9 through 5.9.9, from 5.8 through 5.8.9, from 5.7 through 5.7.11, from 5.6 through 5.6.13, from 5.5 through 5.5.14, from 5.4 through 5.4.15, from 5.3 through 5.3.17, from 5.2 through 5.2.20, from 5.1 through 5.1.18, from 5.0 through 5.0.21, from 4.9 through 4.9.25, from 4.8 through 4.8.24, from 4.7 through 4.7.28, from 4.6 through 4.6.28, from 4.5 through 4.5.31, from 4.4 through 4.4.32, from 4.3 through 4.3.33, from 4.2 through 4.2.37, from 4.1 through 4.1.40.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WordPress

Vendor: Automattic
Product: WordPress
Platforms: Unknown
Default status: unaffected

WordPress · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.5	`affected`	custom	Unavailable	6.5.4	`6.5.5` → `unaffected`
6.4	`affected`	custom	Unavailable	6.4.4	`6.4.5` → `unaffected`
6.3	`affected`	custom	Unavailable	6.3.4	`6.3.5` → `unaffected`
6.2	`affected`	custom	Unavailable	6.2.5	`6.2.6` → `unaffected`
6.1	`affected`	custom	Unavailable	6.1.6	`6.1.7` → `unaffected`
6.0	`affected`	custom	Unavailable	6.0.8	`6.0.9` → `unaffected`
5.9	`affected`	custom	Unavailable	5.9.9	`5.9.10` → `unaffected`
5.8	`affected`	custom	Unavailable	5.8.9	`5.8.10` → `unaffected`
5.7	`affected`	custom	Unavailable	5.7.11	`5.7.12` → `unaffected`
5.6	`affected`	custom	Unavailable	5.6.13	`5.6.14` → `unaffected`
5.5	`affected`	custom	Unavailable	5.5.14	`5.5.15` → `unaffected`
5.4	`affected`	custom	Unavailable	5.4.15	`5.4.16` → `unaffected`
5.3	`affected`	custom	Unavailable	5.3.17	`5.3.18` → `unaffected`
5.2	`affected`	custom	Unavailable	5.2.20	`5.2.21` → `unaffected`
5.1	`affected`	custom	Unavailable	5.1.18	`5.1.19` → `unaffected`
5.0	`affected`	custom	Unavailable	5.0.21	`5.0.22` → `unaffected`
4.9	`affected`	custom	Unavailable	4.9.25	`4.9.26` → `unaffected`
4.8	`affected`	custom	Unavailable	4.8.24	`4.8.25` → `unaffected`
4.7	`affected`	custom	Unavailable	4.7.28	`4.7.29` → `unaffected`
4.6	`affected`	custom	Unavailable	4.6.28	`4.6.29` → `unaffected`
4.5	`affected`	custom	Unavailable	4.5.31	`4.5.32` → `unaffected`
4.4	`affected`	custom	Unavailable	4.4.32	`4.4.33` → `unaffected`
4.3	`affected`	custom	Unavailable	4.3.33	`4.3.34` → `unaffected`
4.2	`affected`	custom	Unavailable	4.2.37	`4.2.38` → `unaffected`
4.1	`affected`	custom	Unavailable	4.1.40	`4.1.41` → `unaffected`