CVE-2024-9575: Local File Inclusion in pretix-widget WordPress plugin
Published Oct 9, 2024
·Updated
Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Inclusion. This issue affects pretix Widget WordPress plugin: from 1.0.0 through 1.0.5.
Affected Software
1 affected component
pretix Widget WordPress plugin>=1.0.0<=1.0.5
Event History
Oct 9, 2024
CVE Published
via MITRE·09:40 AM
Data Sourced
via MITRE·09:40 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-9575?
CVE-2024-9575 is classified as a Local File Inclusion vulnerability, which can lead to unauthorized access to sensitive files.
2
How do I fix CVE-2024-9575?
To fix CVE-2024-9575, update the pretix Widget WordPress plugin to version 1.0.6 or later.
3
What versions of the pretix Widget WordPress plugin are affected by CVE-2024-9575?
CVE-2024-9575 affects the pretix Widget WordPress plugin versions from 1.0.0 through 1.0.5.
4
What impact does CVE-2024-9575 have on my website?
CVE-2024-9575 can allow attackers to include arbitrary files on the server, potentially leading to data breaches.
5
Is there a patch available for CVE-2024-9575?
Yes, a patch is available by upgrading to the latest version of the pretix Widget WordPress plugin.