Log out
Get PRO

Latest

Input validation vulnerability in WizShop 3.0.2

  • Severity: critical
  • Status: Open
  • Publication: February 3, 2025

The WizShop plugin for WordPress has a security issue called Local File Inclusion. This problem exists in versions up to 3.0.2. It allows attackers who are not logged in to access and run any files they want on the server. This means they can run PHP code from those files. This could let them get around security measures, get private information, or run code even if the files are supposed to be safe, like images.

Detected in:

WizShop open vulnerable versions: >= * <= 3.0.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.