CVE-2024-9575CWE-22CWE-73

Local File Inclusion in pretix-widget WordPress plugin

High · published October 9, 2024

CVSS v4.0
8.5
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Inclusion. This issue affects pretix Widget WordPress plugin: from 1.0.0 through 1.0.5.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/RE:L
EPSS
0.00522 · 43.5th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-73 · External Control of File Name or Path
Published
2024-10-09T09:40Z
EPSS history
Timeline
  • 09 OCT 09:40Z
    Local File Inclusion in pretix-widget WordPress plugin
    cvelistv5