Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Category Ajax Filter plugin for WordPress allows attackers to access arbitrary files

CVE-2024-10871 · published 1 year ago
Summary

The Category Ajax Filter plugin for WordPress has a security flaw that could allow unauthorized users to access and execute files on your website, potentially leading to data theft or malicious code execution. This issue affects all versions of the plugin up to and including 2.8.2. To protect your site, update the plugin to the latest version or consider removing it if you don't use it.

Original advisory text
The Category Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.2 via the 'params[caf-post-layout]' parameter. This makes it possible f...
The Category Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.2 via the 'params[caf-post-layout]' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where files with a .php extension can be uploaded and included.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-98Improper Control of Filename for Include
Timeline
Published9 Nov 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-10871 · NVD
Track software like this
Free during beta