| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | ≥ 6.4.0, < 6.4.2 | 6.4.2 |
WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows for code execution via its `__destruct()` magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior to 6.4.0 are not affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free