9.1
Critical
CVE-2024-3673 The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(),…
Description
The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Web Directory Free 1.7 | earliest → < 1.7.3 | 1.7.3 |
| web_directory_free 1.7 | earliest → < 1.7.3 | 1.7.3 |