Skip to content
OpenAdvisories
High · 7.5 CVE-2024-52497 EUVD-2024-46088GHSA-4rwc-5m33-7fpv

WordPress Shopready plugin <= 3.6 - Local File Inclusion vulnerability

Published Nov 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in quomodosoft Shopready shopready-elementor-addon allows PHP Local File Inclusion.This issue affects Shopready: from n/a through <= 3.6.

Affected products

VendorProductAffectedFixed
quomodosoft Shopready ≤ 3.6 —

References