CVE-2024-33628

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in XforWooCommerce allows PHP Local File Inclusion.This issue affects XforWooCommerce: from n/a through 2.0.2...

CVE-2024-33628

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in XforWooCommerce allows PHP Local File Inclusion.This issue affects XforWooCommerce: from n/a through 2.0.2...

CVE-2024-33628 WordPress XforWooCommerce plugin <= 2.0.2 - Authenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in XforWooCommerce allows PHP Local File Inclusion.This issue affects XforWooCommerce: from n/a through 2.0.2...

CVE-2024-33628

CVE-2024-33628 is an authenticated local file inclusion vulnerability in the WordPress XforWooCommerce plugin. Affected plugin range: up to and including version 2.0.2; exploitation requires authentication. CVSS 3.1 base score 8.8 (high impact on confidentiality, integrity, and availability). Rem...

CVE-2024-33628 WordPress XforWooCommerce plugin <= 2.0.2 - Authenticated Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in XforWooCommerce allows PHP Local File Inclusion.This issue affects XforWooCommerce: from n/a through 2.0.2...

WordPress XforWooCommerce Plugin <= 2.0.2 is vulnerable to Local File Inclusion

Software XforWooCommerce Type Plugin Vulnerable versions = 2.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-33628 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID c41c6a05c14e Credits Dave Jong Patchstack Required privilege...