CVE-2024-52497

CVE-2024-52497 details a Local File Inclusion in Shopready (WordPress Shopready plugin/Shopready Elementor addon) due to improper control of the filename in Include/Require usage. Affected versions include Shopready up to 3.5 (Wordfence/CVE records) and up to 3.6 per Patchstack reference. The CVE...

CVE-2024-52499

CVE-2024-52499: WordPress Pricing table addon for Elementor

CVE-2024-52501

CVE-2024-52501 affects the WordPress Office Locator plugin (Office Locator) with improper control of filenames in Include/Require statements, i.e., a Local File Inclusion/ PHP Remote File Inclusion issue. Public details indicate impact on Office Locator versions from 1.0 up to 1.3.0, with vendor ...

CVE-2024-52496: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AbsolutePlugins Absolute Addons For Elementor absolute-addons allows Local Code Inclusion.This issue affects Absolute Addons For Elementor: from n/a through = 1.0.14...

WordPress plugin Absolute Addons For Elementor has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Shopready has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Pricing table addon for Elementor has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-52499: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ibrahim Pricing table addon for elementor pricing-table-addon-for-elementor allows PHP Local File Inclusion.This issue affects Pricing table addon for elementor: from n/a through...

WordPress plugin Office Locator has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-35337 · Elementor · Absolute Addons For Elementor

Name of the Vulnerable Software and Affected Versions: Absolute Addons For Elementor versions 1.0.14 and earlier Description: The issue is related to improper control of filenames for include/require statements in PHP programs, also known as PHP Remote File Inclusion. This allows for Local Code...

PT-2024-35342 · Webbytemplate · Webbytemplate Office Locator

Name of the Vulnerable Software and Affected Versions: webbytemplate Office Locator versions 1.3.0 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion'. This vulnerability affects the...

PT-2024-35340 · Elementor · Pricing Table Addon For Elementor

Name of the Vulnerable Software and Affected Versions: Pricing table addon for elementor versions prior to 1.0.0 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local Fil...

CVE-2024-52501: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WebbyTemplate Office Locator office-locator.This issue affects Office Locator: from n/a through = 1.3.0...

CVE-2024-48862

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the followin...

PT-2024-33250

Name of the Vulnerable Software and Affected Versions QuLog Center versions prior to 1.7.0.831 QuLog Center versions prior to 1.8.0.888 Description A link following vulnerability has been reported to affect QuLog Center, allowing remote attackers to traverse the file system to unintended location...

CVE-2024-52450

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in officialprocoders nBlocks nblocks allows PHP Local File Inclusion.This issue affects nBlocks: from n/a through = 1.0.2...

CVE-2024-52450

CVE-2024-52450 describes an Unauthenticated Local File Inclusion in the WordPress plugin “nBlocks” (versions up to and including 1.0.2) caused by improper control of filenames in PHP Include/Require statements. Public sources in the Connected documents confirm the issue affects nBlocks from n/a t...

CVE-2024-52450: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in officialprocoders nBlocks nblocks allows PHP Local File Inclusion.This issue affects nBlocks: from n/a through = 1.0.2...

PT-2024-35290 · Nblocks · Nblocks

Name of the Vulnerable Software and Affected Versions: nBlocks versions 1.0.2 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP programs, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...

CVE-2024-52428

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Peter Ads Booster by Ads Pro free-wp-booster-by-ads-pro allows PHP Local File Inclusion.This issue affects Ads Booster by Ads Pro: from n/a through = 1.12...