Lucene search
+L

4 matches found

OSV
OSV
•added 2021/07/19 11:15 a.m.•16 views

CVE-2021-24453

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution RCE of the system due to log poisoning and therefore potentially a full compromise of the underlying structure...

8.8CVSS5.9AI score0.04956EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/07/19 11:15 a.m.•11 views

CVE-2021-24453

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution RCE of the system due to log poisoning and therefore potentially a full compromise of the underlying structure...

9CVSS7.3AI score0.04956EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/07/19 10:53 a.m.•42 views

CVE-2021-24453 Include Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoning

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution RCE of the system due to log poisoning and therefore potentially a full compromise of the underlying structure...

9.1AI score0.04956EPSS
SaveExploits2References1
CVE
CVE
•added 2021/07/19 10:53 a.m.•112 views

CVE-2021-24453

CVE-2021-24453 affects the WordPress plugin Include Me (versions up to 1.2.1). The flaw is a path traversal / local file inclusion (LFI) that can lead to Remote Code Execution (RCE) via log poisoning, potentially allowing full compromise of the underlying site. Affected detail: authenticated RCE ...

9CVSS8.9AI score0.04956EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder