CVE-2024-56278 – WordPress WP Ultimate Exporter plugin <= 2.9.1 - Remote Code Execution (RCE) vulnerability

https://notcve.org/view.php?id=CVE-2024-56278

03 Jan 2025 — Improper Control of Generation of Code ('Code Injection') vulnerability in Smackcoders WP Ultimate Exporter allows PHP Remote File Inclusion.This issue affects WP Ultimate Exporter: from n/a through 2.9.1. La vulnerabilidad de control inadecuado de generación de código ('inyección de código') en WP Ultimate Exporter de Smackcoders permite la inclusión remota de archivos PHP. Este problema afecta a WP Ultimate Exporter: desde n/a hasta 2.9.1. The Export All Posts, Products, Orders, Refunds & Users plugin for... • https://github.com/DoTTak/CVE-2024-56278 • CWE-94: Improper Control of Generation of Code ('Code Injection') •