WordPress 6.3.4 Vulnerabilities

Vulnerabilities 4

Medium 5.9

2026-03-10

WordPress <= 6.9.1 - Authenticated (Author+) XML External Entity Injection via getID3 Library Media Upload

Wordfence Wordfence Wordfence Wordfence Wordfence CVE CVE EUVD EUVD Wordfence Wordfence CVE EUVD CVE Wordfence

Medium 6.5

2024-06-25

CVE-2024-31111

Medium 6.4

2024-06-25

CVE-2024-6307

N/A

2024-06-25

WordPress is vulnerable to Cross Site Scripting (XSS)