CVE-2024-34554

ALTO 8.8CVE-2024-34554 · Published 04/06/2024 · updated 17/06/2026

In breve

CVE-2024-34554 è una vulnerabilità ALTO (CVSS 8.8) che riguarda stockholm core (select-themes).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.51%, superiore al 44.0% delle vulnerabilità.
Correzione: aggiornare a 2.4.2 o successiva.

Package	Affected versions	Patched versions
stockholm core select-themes	`< 2.4.2`	`2.4.2`

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm Core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through 2.4.1.

References

patchstack.com/database/vulnerability/stockholm-core/wordpress-stockholm-core-plugin-2-4-1-local-file-inclusion-vulnerability · Third Party Advisory

Altre vulnerabilità di stockholm core

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free