2 matches found
CVE-2024-13725 Keap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File Inclusion
The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those...
9.8CVSS7.8AI score0.01369EPSS
SaveExploits0References4
CVE-2024-13725
CVE-2024-13725 affects the Keap Official Opt-in Forms plugin for WordPress (versions up to 2.0.1). The vulnerability is Local File Inclusion via the service parameter, enabling unauthenticated PHP file inclusion and potential code execution in those files. Impact includes bypassing access control...
9.8CVSS7.9AI score0.01369EPSS
SaveExploits0References4Affected Software1
20