CVE-2024-50497: A critical PHP Remote File Inclusion vulnerability exists in BuyNowDepot Advanced Online Ordering and Delivery Platform. This flaw allows for potential local file inclusion, affecting versions up to 2.0.0. The SOCRadar Vulnerability Risk Score (SVRS) is 84, indicating immediate action is needed. This vulnerability, classified as CWE-829, stems from improper control of filenames used in include/require statements within the PHP program. Threat actors could exploit this to include malicious files, potentially leading to remote code execution. Given the high SVRS, organizations using the affected platform should prioritize patching this vulnerability to mitigate the risk of compromise and data breaches. This is a serious threat because it can give attackers full control of the server.