CVE-2024-49251
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') (CWE-98)
Published: Oct 16, 2024 / Updated: 34d ago
010
CVSS 7.5EPSS 0.04%High
CVE info copied to clipboard
: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maantheme Maan Addons For Elementor allows Local Code Inclusion.This issue affects Maan Addons For Elementor: from n/a through 1.0.1.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
CVE Assignment
NVD published the first details for CVE-2024-49251
Oct 16, 2024 at 2:15 PM
CVSS
A CVSS base score of 7.5 has been assigned.
Oct 16, 2024 at 2:20 PM / nvd
First Article
Feedly found the first article mentioning CVE-2024-49251. See article
Oct 16, 2024 at 2:21 PM / National Vulnerability Database
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Oct 16, 2024 at 8:03 PM
EPSS
EPSS Score was set to: 0.04% (Percentile: 9.7%)
Oct 17, 2024 at 10:04 AM
Affected Systems
Php/php
+null more
Attack Patterns
CAPEC-193: PHP Remote File Inclusion
+null more
News
Wordfence Intelligence Weekly WordPress Vulnerability Report (October 14, 2024 to October 20, 2024)
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week: WordPress Plugins with Reported Vulnerabilities Last Week
CVE Alert: CVE-2024-49251
Everyone that supports the site helps enable new functionality. Affected Endpoints:
NA - CVE-2024-49251 - : Improper Control of Filename for...
: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maantheme Maan Addons For Elementor allows Local Code...
CVE-2024-49251
: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maantheme Maan Addons For Elementor allows Local Code Inclusion.This issue affects Maan Addons For Elementor: from n/a through...
CVE-2024-49251
: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Maantheme Maan Addons For Elementor allows Local Code Inclusion.This issue affects Maan Addons For Elementor: from n/a through...
See 5 more articles and social media posts