WP Image Zoom < 1.47 - Local File Inclusion
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.4%
exploitation probability
1.4%top 31% of all CVEs
observed exploitation
nono source reports it
The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclusion issue in the admin dashboard
Affected products
Unknown · WP Image Zoom