CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in highwarden Super Store Finder superstorefinder-wp allows PHP Local File Inclusion.This issue affects Super Store Finder: from n/a through < 7.8.
Explanation of Vulnerability in Simple Terms
Super Store Finder versions 7.8 and earlier contain a vulnerability that allows an attacker to read sensitive data, modify site content, or disrupt service. The attack requires network access and user interaction—typically the victim must click a malicious link or visit a compromised page. Attack complexity is high, suggesting the exploit requires specific conditions or timing.
What an attacker can do
Read sensitive data, modify site content, or cause the site to become unavailable.
Potential impact on your site
Site data could be exposed, content altered, or service disrupted if a user is tricked into clicking a malicious link.
Conditions required to exploit
Network access; victim must click a link or visit a page controlled by the attacker.
Key dates
External resources
Related vulnerabilities
