Description
WordPress Plugin Premmerce Permalink Manager for WooCommerce is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin Premmerce Permalink Manager for WooCommerce version 2.3.10 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.3.11 or latest
References
https://github.com/truonghuuphuc/CVE-2024-27971-Note
https://plugins.svn.wordpress.org/woo-permalink-manager/trunk/readme.txt
Related Vulnerabilities
CKEditor Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-26272)
WordPress Plugin SMTP Mail Cross-Site Scripting (1.3.1)
WordPress 4.5.x Cross-Site Scripting Vulnerability (4.5 - 4.5.1)
WordPress Plugin Custom Simple Rss Cross-Site Request Forgery (2.0.6)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5268)