CVE-2024-3807

creationtimestamp| type| source ---|---|--- 2024-11-12 07:33:19+00:00| seen| https://krebsonsecurity.com/2024/10/brazil-arrests-usdod-hacker-in-fbi-infragard-breach/ 2025-03-19 15:48:38+00:00| seen| MISP/2bb5c40c-5583-4a30-bc62-81e5a7af21a7...

CVE-2024-3807

CVE-2024-3807 affects the WordPress Porto theme (versions up to 7.1.0). The vulnerability is a Local File Inclusion via post-meta parameters porto_page_header_shortcode_type, slideshow_type, and post_layout, allowing an authenticated attacker with contributor-level permissions to include and exec...

WordPress Porto Theme <= 7.1.0 is vulnerable to Local File Inclusion

Software Porto Type Theme Vulnerable versions = 7.1.0 Fixed in 7.1.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-3807 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 38a52e0d2a37 Credits István Márton Required privilege Contributor Published...