PHP Local File Inclusion Vulnerability in Dynamic Web Lab WooCommerce Product Slider

CVE-2024-56230

Summary

A vulnerability affecting Dynamic Web Lab’s Dynamic Product Category Grid and Slider for WooCommerce arises from improper control of the filename during PHP include or require statements. This flaw permits a form of PHP Local File Inclusion, where unauthorized access to local files may occur, thereby exposing sensitive information or allowing further exploits. The issue affects versions from n/a up to and including 1.1.3, emphasizing the need for users to review their installations and implement necessary security updates.

References