CVE Database /
CVE-2024-3061
CVE · High
CVE-2024-3061 — HUSKY – Products Filter for WooCommerce Professional [woocommerce-products-filter] < 1.3.5.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-3061
|
HUSKY – Products Filter for WooCommerce Professional [woocommerce-products-filter] < 1.3.5.3 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') |
High
7.2
|
< 1.3.5.3
|
1.3.5.3 |
2024-03-28 |
—
|
CVE-2024-3061
The HUSKY – Products Filter for WooCommerce plugin prior to version 1.3.5.3 contains a local file inclusion vulnerability that permits attackers to access and display arbitrary files from the target server, potentially exposing sensitive data such as database credentials. If exploited, this flaw could lead to unauthorized database access or complete compromise of the database depending on the server's configuration. The vulnerability was discovered by haidv35 from Viettel Cyber Security and has been resolved in version 1.3.5.3 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings