CVE-2024-49286

CVE-2024-49286 affects WordPress SSV Events plugin ≤ 3.2.7 (Moridrin SSV Events). A path traversal flaw permits PHP Local File Inclusion, effectively enabling Remote Code Execution. Affected versions: 3.2.7 and earlier. Root cause: improper restriction of pathnames to restricted directories. Expl...