Skip to content
OpenAdvisories

Vendor

mcnardelli

1 known vulnerabilities.

Products

Where I Was, Where I Will Be 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-5577

    Where I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion

    The Where I Was, Where I Will Be plugin for WordPress is vulnerable to Remote File Inclusion in version <= 1.1.1 via the WIW_HEADER parameter of the /system/include/include_user.php file. This makes it possible for unauthenticated attackers to include and exe…

    mcnardelli Where I Was, Where I Will Be Web / CMS