Unrated severityNVD Advisory· Published Aug 30, 2024· Updated Aug 30, 2024

Web Directory Free < 1.7.3 - Unauthenticated LFI

CVE-2024-3673

Description

The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Web Directory Freecpe-rescue
Package: https://wordpress.org/plugins/web-directory-free
Web Directory Pro/Web Directory Prollm-fuzzy
Range: <1.7.3

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0e8930cb-e176-4406-a43f-a6032471debf/mitreexploitvdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000