Lucene search
+L

Web Directory Free Plugin Code Execution

🗓️ 26 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType 
bdu_fstec
 bdu_fstec
🔗 bdu.fstec.ru👁 22 Views

The include function in the Directory Free plugin enables remote code execution due to a faulty path restriction.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for CVE-2024-3673
24 Jan 202521:50
–githubexploit
circl
Circl
CVE-2024-3673
30 Aug 202408:57
–circl
cnnvd
CNNVD
WordPress plugin: Web Directory Free security vulnerabilities
30 Aug 202400:00
–cnnvd
cve
CVE
CVE-2024-3673
30 Aug 202406:00
–cve
cvelist
Cvelist
CVE-2024-3673 Web Directory Free < 1.7.3 - Unauthenticated LFI
30 Aug 202406:00
–cvelist
kitploit
Kitploit
CVE-2024-3673
20 Oct 202605:32
–kitploit
nuclei
Nuclei
Web Directory Free < 1.7.3 - Local File Inclusion
20 Oct 202602:05
–nuclei
nvd
NVD
CVE-2024-3673
30 Aug 202406:15
–nvd
osv_cve
osv_cve
CVE-2024-3673
30 Aug 202406:15
–osv_cve
patchstack
Patchstack
WordPress Web Directory Free plugin < 1.7.3 - Unauthenticated LFI vulnerability
30 Aug 202406:49
–patchstack
Rows per page
Vulners

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

28 May 2025 00:00Current
5.9Medium risk
Vulners AI Score5.9
CVSS 38.8
CVSS 29
EPSS0.05578
22