The vulnerability CVE-2024-52428 affects the Ads Booster by Ads Pro WordPress plugin up to version 1.12. It is caused by improper validation or control of filenames used in PHP include or require statements, which leads to a Local File Inclusion vulnerability. This allows attackers to include and execute local files on the server, potentially leading to remote code execution or data disclosure. The CVSS 3.1 base score is 8.1, reflecting high impact on confidentiality, integrity, and availability. The vulnerability is network exploitable without privileges or user interaction but requires high attack complexity. No patch or vendor advisory is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to full compromise of the affected system, including unauthorized disclosure of sensitive information, modification of data, and disruption of service. The attacker can leverage the Local File Inclusion to execute arbitrary code or access sensitive files on the server. Given the high CVSS score and the nature of the vulnerability, the impact is considered severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the vulnerable plugin version to prevent exploitation. Monitoring for updates from the vendor or trusted security sources is recommended. No vendor advisory or patch links are currently available.