QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24453

Published: Jul 19, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution (RCE) of the system due to log poisoning and therefore potentially a full compromise of the underlying structure

Vendor	Product	Versions
Unknown	Include Me	affected `1.2.1 - <= 1.2.1`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/78575072-4e04-4a8a-baec-f313cfffe829

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.