CVE-2018-20973: Codeermeneer Companion Auto Update

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.

Affected products

• Codeermeneer Companion Auto Update: before 3.2.1 (fixed in 3.2.1)

Published 2019-08-16. Last modified 2026-06-17.