CVE-2024-12209 | wphealth WP Umbrella Plugin up to 2.17.0 on WordPress umbrella-restore filename filename control

A vulnerability classified as critical was found in wphealth WP Umbrella Plugin up to 2.17.0 on WordPress. Affected by this vulnerability is the function umbrella-restore. The manipulation of the argument filename leads to improper control of filename for include/require statement in php program (‘php remote file inclusion’).

This vulnerability is known as CVE-2024-12209. The attack can be launched remotely. There is no exploit available.