Lucene search

CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'

🗓️ 06 Dec 2024 13:19:45Reported by WordfenceType

Swift Performance Lite plugin allows unauthenticated local PHP file inclusion enabling file execution.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2024-10516 Swift Performance Lite <= 2.3.7.1 - Unauthenticated Local PHP File Inclusion via 'ajaxify'	6 Dec 202413:45	–	cvelist
Nuclei	Swift Performance Lite < 2.3.7.2 - Local PHP File Inclusion	7 Dec 202411:55	–	nuclei
NVD	CVE-2024-10516	6 Dec 202414:15	–	nvd
CVE	CVE-2024-10516	6 Dec 202414:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)	12 Dec 202415:38	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:swteplugins:swift_performance:*:*:*:*:lite:wordpress:*:*"
    ],
    "vendor": "swteplugins",
    "product": "swift_performance",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "2.3.7.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4921f41a-a9b1-4ae2-a903-c14ed22dcc15
plugins	www.plugins.trac.wordpress.org/browser/swift-performance-lite/trunk/includes/classes/class.ajax.php
plugins	www.plugins.trac.wordpress.org/changeset/3201933/
plugins	www.plugins.trac.wordpress.org/browser/swift-performance-lite/trunk/includes/classes/class.ajax.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Dec 2024 13:45Current

8High risk

Vulners AI Score8

CVSS38.1

EPSS0.012

SSVC

CWE-22