title: WP Image Zoom < 1.47 - Local File Inclusion
description: The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclusion issue in the admin dashboard
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
product: WP Image Zoom
vendor: Unknown
versions:
lessThan: 1.47, status: affected, version: 1.47, versionType: custom
}