CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects WordPress. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-5882
Severity
HIGH
CVSS
7.5
EPSS
0.76%
WordPress
Original NVD Description
The Ultimate Classified Listings WordPress plugin before 1.3 does not validate the `ucl_page` and `layout` parameters allowing unauthenticated users to access PHP files on the server from the listings page
Related CVEs
Other vulnerabilities affecting the same vendor(s)