CVE-2019-15839 – Sina Extension for Elementor < 2.2.1 - Local File Inclusion

https://notcve.org/view.php?id=CVE-2019-15839

The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion. El plugin sina-extension-for-elementor anterior a la versión 2.2.1 para WordPress tiene inclusión de archivos locales. • https://wordpress.org/plugins/sina-extension-for-elementor/#developers https://wpvulndb.com/vulnerabilities/9368 https://www.pluginvulnerabilities.com/2019/06/18/our-proactive-monitoring-caught-a-local-file-inclusion-lfi-vulnerability-being-added-in-to-sina-extension-for-elementor • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') CWE-829: Inclusion of Functionality from Untrusted Control Sphere •