cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-4551,https://securityvulnerability.io/vulnerability/CVE-2024-4551,Arbitrary PHP File Inclusion Vulnerability in YouTube Playlist and Channel Gallery Plugin for WordPress,"The YouTube Playlist, Channel Gallery by YotuWP plugin for WordPress contains a Local File Inclusion vulnerability through the display function. This vulnerability affects all versions up to and including 1.3.13, enabling authenticated users with contributor access and above to include and execute arbitrary PHP files on the server. The exploitation of this vulnerability can lead to bypassing access controls and unauthorized execution of PHP code. Attackers could potentially exploit this flaw to retrieve sensitive data or execute malicious scripts by uploading seemingly safe file types such as images. As a result, it poses a significant security risk for WordPress sites utilizing this plugin.",Wordpress,"Video Gallery – Youtube Playlist, Channel Gallery By YotuWP",8.8,HIGH,0.0006699999794363976,false,,false,false,false,,false,false,2024-06-15T08:42:17.622Z,0
CVE-2024-4258,https://securityvulnerability.io/vulnerability/CVE-2024-4258,Unauthorized File Inclusion Vulnerability in YouTube Playlist and Channel Gallery Plugin for WordPress,"The Video Gallery – YouTube Playlist, Channel Gallery plugin by YotuWP for WordPress is susceptible to a Local File Inclusion vulnerability that impacts all versions up to and including 1.3.13. This vulnerability allows unauthenticated attackers to manipulate the settings parameter, enabling them to include and execute arbitrary files housed on the server. As a consequence, this flaw permits the execution of malicious PHP code within those files. The exploitation of this vulnerability can lead to unintended access to sensitive information or facilitate unauthorized code execution, particularly in scenarios where file uploads are not sufficiently restricted to safe file types.",Wordpress,"Video Gallery – Youtube Playlist, Channel Gallery By YotuWP",9.8,CRITICAL,0.0004299999854993075,false,,false,false,false,,false,false,2024-06-15T08:42:16.371Z,0