Salient Core vulnerabilities

2 known vulnerabilities in Salient Core from ThemeNectar. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Salient Core: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-3812May 18, 2024ThemeNectar

  The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortcode 'icon_linea' attribute. This makes it possible for authenticated attackers, with contributor-level and above

• 8.8 High severity

  Salient Shortcodes: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-3810May 18, 2024ThemeNectar

  The Salient Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.3 via the 'icon' shortcode 'image' attribute. This makes it possible for authenticated attackers, with contributor-level and above permi