← CVE Intelligence

CVE-2024-6330

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI PUBLISHED

Description (CNA)

The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

Affected (CNA)

Vendor / productVersions
Unknown / GEO my WPaffected 0 before 4.5.0.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.