CVE-2025-22364 – WordPress Ach Invoice App plugin <= 1.0.1 - Local File Inclusion vulnerability

https://notcve.org/view.php?id=CVE-2025-22364

03 Jan 2025 — Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Service Shogun Ach Invoice App allows PHP Local File Inclusion.This issue affects Ach Invoice App: from n/a through 1.0.1. Vulnerabilidad de control inadecuado del nombre de archivo para la declaración Include/Require en PHP Program ('Inclusión de archivo remoto PHP') en Service Shogun Ach Invoice App permite la inclusión de archivos locales PHP. Este problema afecta a Ach Invoice App: de... • https://patchstack.com/database/wordpress/plugin/ach-invoice-app/vulnerability/wordpress-ach-invoice-app-plugin-1-0-1-local-file-inclusion-vulnerability?_s_id=cve • CWE-98: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') •