CVE-2021-24453: Include Me Project Include Me

High severity, CVSS 8.8. EPSS: 5% chance of exploitation in the next 30 days.

The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution (RCE) of the system due to log poisoning and therefore potentially a full compromise of the underlying structure

Affected products

• Include Me Project Include Me: up to and including 1.2.1

Published 2021-07-19. Last modified 2026-06-17.