CVE-2024-6306

Name of the Vulnerable Software and Affected Versions: WordPress Core versions up to 6.5.5

Description: The issue allows authenticated attackers with Contributor-level access and above to include arbitrary HTML files on sites running Windows due to a Directory Traversal vulnerability via the Template Part block.

Recommendations: For versions up to 6.5.5, update to a version that contains a fix for this issue to prevent exploitation.