CVE-2024-3806

creationtimestamp| type| source ---|---|--- 2025-03-19 15:48:34+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

CVE-2024-3806 Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'portoajaxposts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in...

CVE-2024-3806

CVE-2024-3806 concerns the Porto theme for WordPress. It enables Unauthenticated Local File Inclusion via porto_ajax_posts in all versions up to 7.1.0, allowing arbitrary PHP code execution by including server files. Impact includes bypassing access controls and potential data exposure or code ex...

WordPress Porto Theme <= 7.1.0 is vulnerable to Local File Inclusion

Software Porto Type Theme Vulnerable versions = 7.1.0 Fixed in 7.1.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3806 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 98785fd04b6f Credits István Márton Required privilege Unauthenticated...