An unauthenticated Local File Inclusion (LFI) vulnerability in the Divi Ajax Filter plugin for WordPress enables attackers to execute arbitrary PHP code via the custom_loop_template parameter.
PoC
Divi Ajax Filter
wordpress
lfi
web-application
rce
1r
1t
1c
updated