CVE-2024-6164 — Filter & Grids < 2.8.33 - Unauthenticated LFI
The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenticated attacker to …
Published: 2024-07-18 · CVSS: 9.8 · CVSS 3.1
The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. This makes it possible for an unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7