CVE-2024-3673

The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - contact@wpscan.com

Published

2024-08-30

Last modified

2024-08-30

Affected products

• Web Directory Free (Salephpscripts)
• Web Directory Free (Unknown)

References

• https://wpscan.com/vulnerability/0e8930cb-e176-4406-a43f-a6032471debf/