Arbitrary File Inclusion Vulnerability in Sogrid Post Grid Layouts

CVE-2024-8392

Summary

The Post Grid Layouts with Pagination – Sogrid plugin for WordPress is susceptible to a Local File Inclusion vulnerability through the 'tab' parameter. This security issue allows attackers with Administrator-level access to include and execute arbitrary files on the server. Such exploitation could enable attackers to bypass access controls, retrieve sensitive information, or execute potentially malicious PHP code. Additionally, this vulnerability can be executed using Cross-Site Request Forgery (CSRF) techniques, increasing the risk of compromise for affected WordPress sites.

References