CVE-2024-43129

CVE-2024-43129 affects the WordPress plugin BetterDocs (affected versions: n/a up to 3.5.8) and involves an authenticated Local File Inclusion via path traversal in BetterDocs. The root cause is improper limitation of a pathname to a restricted directory. The vulnerability is documented with a pa...

CVE-2024-39621

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through = 2.9.4...

CVE-2024-38772

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetWidgets for Elementor and WooCommerce allows PHP Local File Inclusion.This issue affects JetWidgets for Elementor and WooCommerce: from n/a through 1.1.7...

CVE-2024-39619

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in CridioStudio ListingPro listingpro-plugin allows PHP Local File Inclusion.This issue affects ListingPro: from n/a through = 2.9.4...

CVE-2024-38768

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion, Path Traversal.This issue affects The Pack Elementor addons: from n/a through 2.0.8.6...

CVE-2024-38768

CVE-2024-38768 is a path traversal/ Local File Inclusion vulnerability in The Pack Elementor addons (WordPress). Affected versions are The Pack Elementor addons up to 2.0.8.6. The issue stems from improper limitation of a pathname to a restricted directory. PatchStack and related sources indicate...

CVE-2024-38772

CVE-2024-38772 is a Path Traversal vulnerability in Crocoblock JetWidgets for Elementor and WooCommerce. Affected: JetWidgets for Elementor and WooCommerce versions up to 1.1.7. Root cause: improper limitation of a pathname to a restricted directory, enabling PHP local file inclusion. Impact: pot...

CVE-2024-39624

CVE-2024-39624: WordPress ListingPro Listing Theme

CVE-2024-38735

CVE-2024-38735 is a path traversal-based local file inclusion in the WordPress Event post plugin (Event post). It allows PHP LFI by improper limitation of a pathname to a restricted directory, affecting Event post versions up to 5.9.5. The issue is marked as patched in 5.9.5; evaluate upgrading t...

CVE-2024-38715

CVE-2024-38715 is an ExS Widgets vulnerability described as an improper limitation of a pathname enabling PHP Local File Inclusion (LFI). The vulnerability affects ExS Widgets versions up to and including 0.3.1, as reported in Red Hat and security trackers, and is associated with path traversal t...

CVE-2024-38709

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6...

CVE-2024-37092

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes Consulting Elementor Widgets allows PHP Local File Inclusion.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0...

CVE-2024-37089

CVE-2024-37089 is an instance of an Unauthenticated Local File Inclusion via path traversal in the WordPress plugin Consulting Elementor Widgets (affected versions: up to 1.3.0). The root cause is an improper limitation of a pathname to a restricted directory, enabling an attacker to access arbit...

CVE-2024-35781

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in YAHMAN Word Balloon allows PHP Local File Inclusion.This issue affects Word Balloon: from n/a through 4.21.1...

CVE-2024-35778

CVE-2024-35778 corresponds to a Path Traversal (Local File Inclusion) affecting Slideshow SE for WordPress, through version 2.5.17. The vulnerability is described as an Authenticated (Author+) LFI with path traversal in PHP. The Wordfence vulnerability listing for Slideshow SE indicates the issue...

CVE-2024-35677

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...

CVE-2024-34762

CVE-2024-34762 affects the WordPress plugin Advanced Custom Fields Pro (WP ACF Pro). The issue is an improper limitation of pathnames to a restricted directory, enabling PHP Local File Inclusion. Public details indicate impact up to versions prior to 6.2.10 (with some sources noting an authentica...

CVE-2024-34762 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2....

CVE-2024-35634

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Wow-Company Woocommerce – Recent Purchases allows PHP Local File Inclusion.This issue affects Woocommerce – Recent Purchases: from n/a through 1.0.1...

CVE-2024-34551

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6...