Local File Inclusion Vulnerability in Themify Builder Product

CVE-2024-56216

Summary

A security vulnerability exists in the Themify Builder, a popular WordPress plugin. This vulnerability arises from an improper control of filenames during the inclusion or require statement in PHP scripts. Such a flaw allows for PHP Local File Inclusion, which can be exploited by an attacker to include files from the local server. By manipulating input parameters, unauthorized code execution can occur, leading to potential data exposure or system compromise. The vulnerability is present in versions from n/a through 7.6.3, making it crucial for users of this plugin to take appropriate measures to safeguard their applications.

References