CVE-2024-5345

The Responsive Owl Carousel for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2.0 via the layout parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary...

WordPress Responsive Owl Carousel for Elementor Plugin <= 1.2.0 is vulnerable to Local File Inclusion

Software Responsive Owl Carousel for Elementor Type Plugin Vulnerable versions = 1.2.0 Fixed in 1.2.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-5345 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 48748da13e8e Credits stealthcopter Require...