Read the docs

Include Me Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Include Me Project records in CISA KEV

No Include Me Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Include Me 1 record MEDIUM

Records

1 record in Include Me · all components

TI-2021-06742 CVE-2021-24453 · GHSA-f2j9-593v-67w7

Include Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoning

Priority MEDIUM 46

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution (RCE) of the system due to log poisoning and therefore potentially a full comp…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04956 Published 2021-07-19 No fix listed CWE-22
Open these records in search →