Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-6330

GEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFI

Description

The GEO my WP WordPress plugin before 4.5.0.2 does not prevent unauthenticated attackers from including arbitrary files in PHP's execution context, which leads to Remote Code Execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown GEO my WP

Default version status: unaffected

  • 0 to < 4.5.0.2affected

References