CVE-2025-24782

ALTO 8.8CVE-2025-24782 · Published 27/01/2025 · updated 17/06/2026

In breve

CVE-2025-24782 è una vulnerabilità ALTO (CVSS 8.8) che riguarda post grid, slider & carousel ultimate (wpwax).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.47%, superiore al 41.1% delle vulnerabilità.
Correzione: aggiornare a 1.7 o successiva.

Package	Affected versions	Patched versions
post grid, slider & carousel ultimate wpwax	`< 1.7`	`1.7`

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Post Grid, Slider & Carousel Ultimate post-grid-carousel-ultimate allows PHP Local File Inclusion.This issue affects Post Grid, Slider & Carousel Ultimate: from n/a through <= 1.6.10.

References

patchstack.com/database/Wordpress/Plugin/post-grid-carousel-ultimate/vulnerability/wordpress-post-grid-slider-carousel-ultimate-with-shortcode-gutenberg-block-elementor-widget-plugin-1-6-10-local-file-inclusion-vulnerability · Third Party Advisory

Altre vulnerabilità di post grid, slider & carousel ultimate

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

post grid, slider & carousel ultimate

wpwax

< 1.7

1.7

Description

Altre vulnerabilità di post grid, slider & carousel ultimate

Vedi tutto →