The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File Inclusion issue.
CVSS 3.1MEDIUM 6.5·Network·No auth·User interaction·EPSS 0.02303·Published 2022-05-16·Fixed in 3.8CWE-22