CVE-2024-49649 | Abdul Hakeem Build App Online Plugin up to 1.0.23 on WordPress Include/Require filename control

A vulnerability has been found in Abdul Hakeem Build App Online Plugin up to 1.0.23 on WordPress and classified as very critical. Affected by this vulnerability is the function Include/Require. The manipulation leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is known as CVE-2024-49649. The attack can be launched remotely. There is no exploit available.