CVE-2024-10516 Scanner
CVE-2024-10516 Scanner - Local File Inclusion (LFI) vulnerability in Swift Performance Lite
Short Info
Level
Critical
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 seconds
Time Interval
26 days 18 hours
Scan only one
Domain, IPv4, Subdomain
Toolbox
-
Swift Performance Lite is a popular WordPress plugin used to enhance website speed and performance. It is widely utilized by website administrators and developers to optimize web content delivery and improve user experience. The plugin offers caching, image optimization, and database cleanup functionalities to boost website efficiency.
The vulnerability in Swift Performance Lite allows unauthenticated attackers to exploit the 'ajaxify' parameter for Local PHP File Inclusion. This flaw can potentially be used to access or include unintended files on the server. Affected versions are prone to exploitation, making it crucial to address this issue promptly.
Technical details indicate that the vulnerable parameter 'ajaxify' can be manipulated to include local PHP files via maliciously crafted requests. Attackers may leverage this to execute arbitrary PHP code on the server, significantly compromising its integrity and security.
If exploited, this vulnerability could lead to unauthorized access, sensitive information disclosure, and complete server takeover. These effects pose severe risks to data confidentiality, integrity, and availability.
REFERENCES
