CVE-2024-31111

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6, from 6.0 through 6.0.8, from 5.9 through 5.9.9.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

EPSS

0.34% chance of exploitation in the next 30 days, 27th percentile

Nuclei

low

Published

2024-06-25

Updated

2026-04-28

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2024/CVE-2024-31111-wordpress-2…

References

• CVE Record
• NVD entry

Related

• CVE-2024-3111
• CVE-2024-31114
• CVE-2024-31065
• CVE-2024-3112
• CVE-2024-31064
• CVE-2024-3113