CVE-2021-24447CWE-22

CVE-2021-24447: vulnerability in WP Image Zoom

WP Image Zoom < 1.47 - Local File Inclusion

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclusion issue in the admin dashboard
Affected products
Unknown · WP Image Zoom