TI-2024-33867 CVE-2024-50434 · GHSA-6qwf-f7j5-fhq9WordPress NewsCard theme <= 1.3 - Local File Inclusion vulnerabilityPriority MEDIUM 41Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse NewsCard newscard.This issue affects NewsCard: from n/a through <= 1.3.CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00483 · Published 2024-10-28 · No fix listed CWE-98