Lucene search
WPScanCVELIST:CVE-2024-6460HistoryAug 16, 2024 - 6:00 a.m.
CVE-2024-6460 Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI
2024-08-1606:00:02
WPScan
www.cve.org
2
cve-2024-6460
grow by tradedoubler
local file inclusion
wordpress plugin
unauthenticated
lfi
php files
server security
EPSS
0
Percentile
9.5%
The Grow by Tradedoubler WordPress plugin through 2.0.21 is vulnerable to Local File Inclusion via the component parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
CNA Affected
[
{
"vendor": "Unknown",
"product": "Grow by Tradedoubler",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "2.0.21"
}
],
"defaultStatus": "affected"
}
]Related
nvd
nvd
CVE-2024-6460
2024-08-16 06:15:04
cve
cve
CVE-2024-6460
2024-08-16 06:15:04
vulnrichment
vulnrichment
CVE-2024-6460 Grow by Tradedoubler <= 2.0.21 - Unauthenticated LFI
2024-08-16 06:00:02
wordfence
wordfence