Hi,<\/p>\n
I have run a scan of my store for PCI DSS compliance, and the following potential exploit has been flagged up:<\/p>\n
http local file inclusion<\/strong> PCI details:<\/strong> This is obviously quite serious as it will mean all stores running YITH magnifier fail PCI DSS compliance.<\/p>\n I don’t use the carousel feature so can just remove this code, but it would be nice to have a proper solution.<\/p>\n https:\/\/wordpress.org\/plugins\/yith-woocommerce-zoom-magnifier\/<\/p>\n","protected":false},"template":"","class_list":["post-6171442","topic","type-topic","status-closed","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6171442","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6171442\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=6171442"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nlocal file inclusion in ver parameter to \/wp-content\/plugins\/yith-woocommerce-zoom-magnifier\/assets\/js\/jquery.carouFredSel.min.js<\/p>\n
\nA local file inclusion vulnerability was detected in a web program. This vulnerability arises due to the web program using user input to identify a local file and include it in the response page, without sufficiently verifying that the user input is valid.<\/p>\n