Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wc8x-254r-w3mh

Опубликовано: 19 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce and WordPress: from n/a through <= 1.1.8.1.

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce and WordPress: from n/a through <= 1.1.8.1.

EPSS

Процентиль: 38%
0.0017
Низкий

7.5 High

CVSS3

Дефекты

CWE-98

Связанные уязвимости

CVSS3: 7.5
nvd
3 месяца назад

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce and WordPress: from n/a through < 1.1.9.

EPSS

Процентиль: 38%
0.0017
Низкий

7.5 High

CVSS3

Дефекты

CWE-98