Skip to content
OpenAdvisories
Critical · 9.6 CVE-2024-49286 EUVD-2024-43352GHSA-7q35-qg5x-ccx8

WordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerability

Published Oct 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jeroen Berkvens SSV Events ssv-events allows PHP Local File Inclusion.This issue affects SSV Events: from n/a through <= 3.2.7.

Affected products

VendorProductAffectedFixed
Jeroen Berkvens SSV Events ≤ 3.2.7 —

References