Skip to content
Sign in
6.5 Medium

CVE-2024-37520 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through <= 2.1.12.

Affected products and versions

Product Affected versions Fixed in
ShopBuilder – Elementor WooCommerce Builder Addons 2.1 earliest → 2.1.12 No fix stated

Other CVEs of ShopBuilder – Elementor WooCommerce Builder Addons

The 3 CVEs of ShopBuilder – Elementor WooCommerce Builder Addons →
CVE-2026-32372 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder –… 5.3 Medium CVE-2024-34812 Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce… 5.3 Medium
Track this CVE