Skip to content
OpenAdvisories
High · 7.5 CVE-2024-47645 EUVD-2024-42570GHSA-9jhf-qw2w-cpxx

WordPress WPOptin plugin <= 2.0.1 - Local File Inclusion vulnerability

Published Oct 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Danish Ali Malik Top Bar – PopUps – by WPOptin wpoptin allows PHP Local File Inclusion.This issue affects Top Bar – PopUps – by WPOptin: from n/a through <= 2.0.1.

Affected products

VendorProductAffectedFixed
Danish Ali Malik Top Bar – PopUps – by WPOptin ≤ 2.0.1 —

References