CVE-2024-12272

The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with...

CVE-2024-12272

creationtimestamp| type| source ---|---|--- 2024-12-25 03:24:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113711319987931764 2024-12-25 04:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xmqldi22 2024-12-25 06:17:22+00:00| seen|...

CVE-2024-12272

CVE-2024-12272 affects the WordPress plugin WP Travel Engine – Elementor Widgets (≤1.3.7). The issue is a Local File Inclusion (LFI) condition in multiple widgets that authenticated users with Contributor+ access can exploit to include and execute arbitrary PHP files on the server, effectively en...

CVE-2024-12272 WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion

The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with...

CVE-2024-12272 WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion

The WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with...