Skip to content
OpenAdvisories
High · 7.5 CVE-2024-44015 EUVD-2024-40797GHSA-jmp6-fm9v-883q

WordPress Users Control plugin <= 1.0.16 - Local File Inclusion vulnerability

Published Oct 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Users Control users-control allows PHP Local File Inclusion.This issue affects Users Control: from n/a through <= 1.0.16.

Affected products

VendorProductAffectedFixed
istmoplugins Users Control ≤ 1.0.16 —

References