CVE-2024-3806criticalobserved exploitationCWE-98

CVE-2024-3806: critical vulnerability in P-THEMES Porto

Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts

Published · Updated

Follow this CVE+ Monitor Porto

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

70Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 9.8epss 2.7%
from disclosure to weapon1 day
Published on NVDMay 9
1st PoC+1d
VulnCheck+314d
The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
P-THEMES · Porto
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — P-THEMES Porto

In the same product, most dangerous first.

CVE-2024-3807HIGHPorto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post MetaEPSS 1.5%