PT-2025-20078 · WordPress · Wpadverts
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
WPAdverts versions through 2.2.2
Description
The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This is a type of security vulnerability that can occur when a web application uses user-input data to include files without proper validation, potentially allowing an attacker to access sensitive files on the server.
Recommendations
For versions through 2.2.2, update to a version that contains a fix for this issue, as using vulnerable versions may expose the system to PHP Local File Inclusion attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wpadverts