Pantherius Modal Survey PHP Remote File Inclusion Vulnerability

Vulnerability

A PHP remote file inclusion vulnerability has been identified in the Pantherius Modal Survey plugin, specifically in versions through 2.0.2.0.1. This vulnerability arises from improper control of filenames in include or require statements, potentially allowing attackers to include malicious files and execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to remote file inclusion, allowing attackers to include files from remote servers and execute them on the server where the vulnerable plugin is installed.

Added: Nov 6, 2025, 6:01 PM
Updated: Nov 6, 2025, 9:35 PM

Vulnerability Rating

Custom Algorithm
spread
3.4
impact
2.5
exploitability
7.6
remediation
0.0
relevance
0.9
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.