TI-2024-05181 CVE-2024-5577 · GHSA-62vj-fq75-3xhv
Where I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion
Priority MEDIUM 51
The Where I Was, Where I Will Be plugin for WordPress is vulnerable to Remote File Inclusion in version <= 1.1.1 via the WIW_HEADER parameter of the /system/include/include_user.php file.