Path Traversal Vulnerability Affects XforWooCommerce

CVE-2024-33628

What is CVE-2024-33628?

A Path Traversal vulnerability has been identified in the XforWooCommerce plugin, allowing unauthorized PHP Local File Inclusion. This may enable attackers to potentially access sensitive files on the server, leading to unauthorized data exposure or executing malicious scripts. The affected versions span from an unspecified release through 2.0.2, highlighting a significant risk for users utilizing this plugin within their WordPress environments. It is crucial for administrators to assess their installations and apply necessary security updates to mitigate potential exploitation.

References