CVE-2024-9575: Local File Inclusion in pretix-widget WordPress plugin

Severity: high (CVSS 8.5 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-09 · updated 2026-06-17
Weakness: CWE-22

Description

Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Inclusion. This issue affects pretix Widget WordPress plugin: from 1.0.0 through 1.0.5.

Affected products

rami.io GmbH Pretiix Widget Wordpress Plugin: from 1.0.0 through 1.0.5; 1.0.6

References

https://patchstack.com/database/vulnerability/pretix-widget/wordpress-pretix-widget-plugin-1-0-5-local-file-inclusion-vulnerability?_s_id=cve
https://pretix.eu/about/en/blog/20241009-wordpress-plugin-1-0-6/

Get alerted when CVE-2024-9575 or the next vulnerability affects your stack