PoC Index85,092 CVEs with PoCs

CVE-2024-6330

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

CRITICAL 9.8EPSS 2.1%

The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

Affected
GEO my WP
CVSS v3.1 CNA
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
2.14% chance of exploitation in the next 30 days, 82nd percentile
Published
2024-08-19

Proof-of-concept exploits (3)

Security advisories

References

Related