Skip to content
OpenAdvisories
High · 7.5 CVE-2024-54225 EUVD-2024-52351GHSA-8jfh-2hq3-wq5v

WordPress Designer plugin <= 1.4.1 - Local File Inclusion vulnerability

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codegearthemes Designer designer allows PHP Local File Inclusion.This issue affects Designer: from n/a through <= 1.4.1.

Affected products

VendorProductAffectedFixed
codegearthemes Designer ≤ 1.4.1 —

References