WordPress Formality Plugin <= 1.5.9 - Local File Inclusion
Michele Giorgi Formality <= 1.5.9 contains a file inclusion vulnerability caused by improper control of filename in include/require statements, letting attackers include local files, exploit requires crafted input.
PoC 已收录Formality
CVSS—EPSS 2.7%