WordPress security by component

Porto Theme - Functionality

Plugin description

Porto Theme - Functionality is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published May 14, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: porto-theme-functionality

Latest vulnerability

CVE-2024-3809: Porto Theme - Functionality: Filesystem traversal

Porto Theme - Functionality is affected by filesystem traversal. Exploitation requires an authenticated WordPress account. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedMay 14, 2024

Safe version guidanceSee mitigation notes

		Safe version
May 14, 2024	CVE-2024-3809 Porto Theme - Functionality: Filesystem traversal Porto Theme - Functionality is affected by filesystem traversal. Exploitation requires an authenticated WordPress account. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE8.8 NVDPending
May 14, 2024	CVE-2024-3808 Porto Theme - Functionality: Filesystem traversal Porto Theme - Functionality is affected by filesystem traversal. Exploitation requires an authenticated WordPress account. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE8.8 NVDPending