WPIntell

Source evidence

Known Vulnerabilities

Graphina – Charts and Graphs For Elementor · support · 2025-07-30T08:15:00+00:00

Graphina – Charts and Graphs For Elementor plugin evidence original source source API
complaintsentiment
highseverity
0.98relevance
1replies
Evidence onlycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

1 / 1 rows with source links

100.0% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

0 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
elenis r. unresolved
I received this message from “Solid Security – Site Scan” Known Vulnerabilities WordPress Graphina <= 3.1.1 – Local File Inclusion Vulnerability How can I fix this vulnerability? Hello @elenis1517 , Thank you for reporting this. We have already fixed the Local File Inclusion vulnerability in the latest update. For example, in includes/Admin/GraphinaAdminMenu.php we have added strict sanitization and whitelisting to prevent unsafe file inclusion: /** * Get the current active tab. * * @return string Active tab slug. Defaults to 'setting' if not set. */ private static function get_current_tab() { $current_tab = isset( $_GET['activetab'] ) ? sanitize_text_field( $_GET['activetab'] ) : 'setting'; $allowed_tabs = array( 'setting', 'elements', 'database', 'free-vs-pro' ); if ( ! in_array( $current_tab, $allowed_tabs, true ) ) { $current_tab = 'setting'; } return $current_tab; } This ensures only whitelisted tabs can be accessed and prevents Local File Inclusion issues. We recommend updating to the latest version to apply the fix. Thank you for your patience and for helping us improve security. Best regards Iqonic Design

Comments

1 shown
Iqonic Design 2025-08-29T04:59:00+00:00

Hello @elenis1517 , Thank you for reporting this. We have already fixed the Local File Inclusion vulnerability in the latest update. For example, in includes/Admin/GraphinaAdminMenu.php we have added strict sanitization and whitelisting to prevent unsafe file inclusion: /** * Get the current active tab. * * @return string Active tab slug. Defaults to 'setting' if not set. */ private static function get_current_tab() { $current_tab = isset( $_GET['activetab'] ) ? sanitize_text_field( $_GET['activetab'] ) : 'setting'; $allowed_tabs = array( 'setting', 'elements', 'database', 'free-vs-pro' ); if ( ! in_array( $current_tab, $allowed_tabs, true ) ) { $current_tab = 'setting'; } return $current_tab; } This ensures only whitelisted tabs can be accessed and prevents Local File Inclusion issues. We recommend updating to the latest version to apply the fix. Thank you for your patience and for helping us improve security. Best regards Iqonic Design