| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2024-5577 | 14 Jun 202408:15 | – | attackerkb |
 | WordPress plugin Where I Was, Where I Will Be security vulnerability | 14 Jun 202400:00 | – | cnnvd |
 | CVE-2024-5577 Where I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion | 14 Jun 202407:31 | – | cvelist |
 | EUVD-2024-46769 | 3 Oct 202520:07 | – | euvd |
 | CVE-2024-5577 | 14 Jun 202408:15 | – | nvd |
 | Wordpress Where I Was, Where I Will Be plugin <= 1.1.1 - Unauthenticated Remote File Inclusion vulnerability | 14 Jun 202403:10 | – | patchstack |
| WordPress Where I Was, Where I Will Be Plugin <= 1.1.1 is vulnerable to Remote File Inclusion | 14 Jun 202400:00 | – | patchstack |
 | CVE-2024-5577: Improper Control of Filename for Include/Require Statement in PHP Program | 14 Jun 202400:00 | – | rapid7 |
 | CVE-2024-5577 | 5 Feb 202506:12 | – | redhatcve |
 | CVE-2024-5577 Where I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion | 14 Jun 202407:31 | – | vulnrichment |
10
[
{
"vendor": "mcnardelli",
"product": "Where I Was, Where I Will Be",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "1.1.1",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| WIW_HEADER | query param | /system/include/include_user.php | Remote File Inclusion via WIW_HEADER parameter on /system/include/include_user.php; allows unauthenticated attackers to include and execute arbitrary PHP files from external servers, enabling code execution if allow_url_include is enabled. | CWE-98 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 08:16Current
10Critical risk
Vulners AI Score10
CVSS 3.19.8
EPSS0.00909
SSVC