Arbitrary File Inclusion Vulnerability in Sogrid Post Grid Layouts

CVE-2024-8392

What is CVE-2024-8392?

The Post Grid Layouts with Pagination – Sogrid plugin for WordPress is susceptible to a Local File Inclusion vulnerability through the 'tab' parameter. This security issue allows attackers with Administrator-level access to include and execute arbitrary files on the server. Such exploitation could enable attackers to bypass access controls, retrieve sensitive information, or execute potentially malicious PHP code. Additionally, this vulnerability can be executed using Cross-Site Request Forgery (CSRF) techniques, increasing the risk of compromise for affected WordPress sites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References