CVE-2024-3673

Web Directory Free < 1.7.3 - Unauthenticated LFI PUBLISHED

Description (CNA)

The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.

Affected (CNA)

Vendor / product	Versions
Unknown / Web Directory Free	affected 0 before 1.7.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/0e8930cb-e176-4406-a43f-a6032471debf/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.