CVEs-PoC/2021/CVE-2021-24453.md

CVE-2021-24453

Description

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution (RCE) of the system due to log poisoning and therefore potentially a full compromise of the underlying structure

POC

Reference

• https://wpscan.com/vulnerability/78575072-4e04-4a8a-baec-f313cfffe829
• https://wpscan.com/vulnerability/78575072-4e04-4a8a-baec-f313cfffe829

Github

No PoCs found on GitHub currently.