{"id":"CVE-2024-50497","aliases":["EUVD-2024-44923","GHSA-qrjg-cmwm-3465"],"status":"published","title":"WordPress Advanced Online Ordering and Delivery Platform plugin \u003c= 2.0.0 - Local File Inclusion vulnerability","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wdesco Advanced Online Ordering and Delivery Platform advanced-online-ordering-and-delivery-platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through \u003c= 2.0.0.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00525,"percentile":0.4496,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-829","CWE-98"],"published":"2024-10-28T12:35:15Z","modified":"2026-06-17T08:04:34Z","products":[{"vendor":"buynowdepot","product":"advanced online ordering and delivery platform"},{"vendor":"buynowdepot","product":"advanced_online_ordering_and_delivery_platform"},{"vendor":"wdesco","product":"advanced online ordering and delivery platform"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/advanced-online-ordering-and-delivery-platform/vulnerability/wordpress-advanced-online-ordering-and-delivery-platform-plugin-2-0-0-local-file-inclusion-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50497"},{"url":"https://patchstack.com/database/vulnerability/advanced-online-ordering-and-delivery-platform/wordpress-advanced-online-ordering-and-delivery-platform-plugin-2-0-0-local-file-inclusion-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-qrjg-cmwm-3465"}],"sources":{"cve":[{"id":"CVE-2024-50497","title":"WordPress Advanced Online Ordering and Delivery Platform plugin \u003c= 2.0.0 - Local File Inclusion vulnerability","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wdesco Advanced Online Ordering and Delivery Platform advanced-online-ordering-and-delivery-platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through \u003c= 2.0.0.","status":"published","published":"2024-10-28T12:35:15.336Z","modified":"2026-05-11T21:19:35.369Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-98"],"updated_at":"2026-11-02T14:34:22.153872Z"}],"euvd":[{"id":"EUVD-2024-44923","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wdesco Advanced Online Ordering and Delivery Platform advanced-online-ordering-and-delivery-platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through \u003c= 2.0.0.","status":"published","published":"2024-10-28T12:35:15Z","modified":"2026-05-11T21:19:35Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:04:49.794891Z"}],"ghsa":[{"id":"GHSA-qrjg-cmwm-3465","title":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BuyNowDepot Advanced Online Ordering and Delivery Platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through 2.0.0.","status":"published","published":"2024-10-28T15:31:14Z","modified":"2026-04-01T18:33:18Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-98","CWE-829"],"updated_at":"2026-11-02T15:07:01.62993Z"}],"nvd":[{"id":"CVE-2024-50497","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wdesco Advanced Online Ordering and Delivery Platform advanced-online-ordering-and-delivery-platform allows PHP Local File Inclusion.This issue affects Advanced Online Ordering and Delivery Platform: from n/a through \u003c= 2.0.0.","status":"published","published":"2024-10-28T13:15:07.2Z","modified":"2026-06-17T08:04:34.943Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-98","CWE-829"],"updated_at":"2026-11-02T14:10:34.877798Z"}]}}