CVE-2024-54374

HIGH

Sogrid <1.5.6 - Path Traversal

Title source: llm

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sabri Sogrid sogrid allows PHP Local File Inclusion.This issue affects Sogrid: from n/a through <= 1.5.6.

Exploits (1)

nomisec WRITEUP

by RandomRobbieBF · poc

https://github.com/RandomRobbieBF/CVE-2024-54374

View Code ZIP pw:eip

References (2)

[Vdb Entry] https://patchstack.com/database/Wordpress/Plugin/sogrid/vulnerability/wordpress-sogrid-plugin-1-5-6-local-file-inclusion-vulnerability?_s_id=cve

[Third Party Advisory] https://patchstack.com/database/wordpress/plugin/sogrid/vulnerability/wordpress-sogrid-plugin-1-5-6-local-file-inclusion-vulnerability?_s_id=cve

Scores

CVSS v3 7.5

EPSS 0.1631

EPSS Percentile 94.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-22

Status published

Products (2)

Sabri/Sogrid < 1.5.6

Sabri Taieb/Sogrid < 1.5.6

Published Dec 16, 2024

Tracked Since Feb 18, 2026