Webfacing
Monthly
Unauthenticated local file inclusion in the WebFacing WordPress plugin before 5.4 lets any remote visitor reach a bundled script that the plugin fails to access-restrict and pass a user-supplied path into a local file include, exposing files readable by the web-server user such as wp-config.php. Exploitation requires no authentication, no user interaction, and no non-default configuration (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U), and publicly available exploit code exists, though CISA KEV does not list this CVE as actively exploited and EPSS remains low at 0.31% (21st percentile). WPScan and the vendor rate confidentiality impact as Low (5.3), while our independent assessment rates it High (C:H) because the contents of readable configuration files can be immediately leveraged against the site.
Unauthenticated local file inclusion in the WebFacing WordPress plugin before 5.4 lets any remote visitor reach a bundled script that the plugin fails to access-restrict and pass a user-supplied path into a local file include, exposing files readable by the web-server user such as wp-config.php. Exploitation requires no authentication, no user interaction, and no non-default configuration (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U), and publicly available exploit code exists, though CISA KEV does not list this CVE as actively exploited and EPSS remains low at 0.31% (21st percentile). WPScan and the vendor rate confidentiality impact as Low (5.3), while our independent assessment rates it High (C:H) because the contents of readable configuration files can be immediately leveraged against the site.