CVE-2024-27971

N/A Unknown
Published: May 17, 2024 Modified: April 01, 2026
View on NVD

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Premmerce Premmerce Permalink Manager for WooCommerce woo-permalink-manager.This issue affects Premmerce Permalink Manager for WooCommerce: from n/a through <= 2.3.10.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://patchstack.com/database/Wordpress/Plugin/woo-permalink-manager/vulnerability/wordpress-premmerce-permalink-manager-for-woocommerce-plugin-2-3-10-local-file-inclusion-vulnerability?_s_id=cve
Source: audit@patchstack.com
https://patchstack.com/database/vulnerability/woo-permalink-manager/wordpress-premmerce-permalink-manager-for-woocommerce-plugin-2-3-10-local-file-inclusion-vulnerability?_s_id=cve
Source: af854a3a-2127-422b-91ae-364da2661108

2 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
48.1%
98th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-98

Related CVEs

CVE-2026-39912 9.1
CVE-2026-35556 N/A
CVE-2026-35195 N/A
CVE-2026-35186 N/A
CVE-2026-34988 N/A