Skip to content
OpenAdvisories
Unscored CVE-2021-24447 EUVD-2021-11359GHSA-vj2g-57f8-3334

WP Image Zoom < 1.47 - Local File Inclusion

Published Jul 19, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclusion issue in the admin dashboard

Affected products

VendorProductAffectedFixed
— WP Image Zoom 1.47 – < 1.47 1.47

References