← back
CVE-2021-24820

Cost Calculator <= 1.6 - Authenticated Local File Inclusion

EPSS 2.9%CWE-22
The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →