Medium · 6.5 CVE-2024-37520 EUVD-2024-36728GHSA-gr8h-x6ch-p7gj

WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 2.1.12 - Local File Inclusion vulnerability

Published Jul 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: RadiusTheme Product: ShopBuilder – Elementor WooCommerce Builder Addons Category: Web / CMS

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through <= 2.1.12.

Affected products

Vendor	Product	Affected	Fixed
RadiusTheme	ShopBuilder – Elementor WooCommerce Builder Addons	≤ 2.1.12	—

References

https://patchstack.com/database/Wordpress/Plugin/shopbuilder/vulnerability/wordpress-shopbuilder-elementor-woocommerce-builder-addons-plugin-2-1-12-local-file-inclusion-vulnerability?_s_id=cve vdb-entry