9.8 Critical

CVE-2024-6164 The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter

Description

The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.

Affected products and versions

Product	Affected versions	Fixed in
filter_\&_grids 2.8	earliest → < 2.8.33	2.8.33
Filter & Grids 2.8	earliest → < 2.8.33	2.8.33

The 2 CVEs of filter_\&_grids →

CVE-2024-39664 Missing Authorization vulnerability in YMC Filter & Grids allows Accessing Functionality Not Properly Constrained by… 7.3 High

Do you use filter_\&_grids?

Track this CVE Watch filter_\&_grids Check my SBOMs

www.cveye.io/en/cve/CVE-2024-6164

Timeline

Published July 18, 2024
Last modified August 1, 2024

References

wpscan.com wpscan.com

Track this CVE

CVE-2024-6164 The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter

Description

Affected products and versions

Other CVEs of filter_\&_grids