Lucene search
+L

23049 matches found

CVE
CVE
added 2026/06/15 12:0 p.m.22 views

CVE-2016-20081

HB Audio Gallery Lite 1.0.0 (WordPress) has a path traversal in audio-download.php via the file_path parameter that allows unauthenticated access to arbitrary files outside the gallery directory (e.g., wp-config.php). Root cause: inadequate validation of the file_path input. The connected documen...

8.7CVSS5.5AI score0.00641EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/15 12:0 p.m.12 views

EUVD-2016-10892

WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files by manipulating the wpabspath parameter. Attackers can supply path traversal sequences or remote URLs through the...

6.9CVSS5.6AI score0.0039EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/15 12:0 p.m.35 views

CVE-2016-20080 WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php

WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files by manipulating the wpabspath parameter. Attackers can supply path traversal sequences or remote URLs through the...

6.9CVSS0.0039EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/06/15 12:0 p.m.9 views

CVE-2016-20080 WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php

WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files by manipulating the wpabspath parameter. Attackers can supply path traversal sequences or remote URLs through the...

6.9CVSS5.6AI score0.0039EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/06/15 12:0 p.m.43 views

CVE-2016-20081 WordPress Plugin HB Audio Gallery Lite 1.0.0 Path Traversal File Download

WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the filepath parameter. Attackers can send requests to the audio-download.php endpoint with directory traversal sequences to acces...

8.7CVSS0.00641EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/06/15 12:0 p.m.11 views

CVE-2016-20081 WordPress Plugin HB Audio Gallery Lite 1.0.0 Path Traversal File Download

WordPress Plugin HB Audio Gallery Lite 1.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the filepath parameter. Attackers can send requests to the audio-download.php endpoint with directory traversal sequences to acces...

8.7CVSS5.4AI score0.00641EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/15 12:0 p.m.16 views

CVE-2016-20080

CVE-2016-20080 – WordPress Brandfolder Plugin (v3.0 and earlier) suffers a local file inclusion flaw in callback.php. An unauthenticated attacker can influence the wp_abspath parameter to read arbitrary local files (e.g., wp-config.php) via path traversal or remote URLs, potentially enabling remo...

6.9CVSS5.7AI score0.0039EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/06/15 12:0 p.m.12 views

EUVD-2016-10891

WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the gateway parameter. Attackers can supply file paths with directory traversal sequences or null byte injection to the gatewa...

6.9CVSS5.4AI score0.00778EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/15 12:0 p.m.20 views

CVE-2016-20079

CVE-2016-20079 affects WordPress Dharma Booking 2.28.3 and earlier. The issue is a local file inclusion in the proccess.php gateway parameter, allowing unauthenticated attackers to read sensitive files by using directory traversal or null byte injection. This can expose configuration and system f...

6.9CVSS5.5AI score0.00778EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/06/15 12:0 p.m.11 views

CVE-2016-20079 WordPress Dharma Booking 2.28.3 Local File Inclusion via proccess.php

WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the gateway parameter. Attackers can supply file paths with directory traversal sequences or null byte injection to the gatewa...

6.9CVSS5.4AI score0.00778EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/15 12:0 p.m.36 views

CVE-2016-20079 WordPress Dharma Booking 2.28.3 Local File Inclusion via proccess.php

WordPress Dharma Booking 2.28.3 and earlier contains a local file inclusion vulnerability that allows unauthenticated attackers to include arbitrary files by manipulating the gateway parameter. Attackers can supply file paths with directory traversal sequences or null byte injection to the gatewa...

6.9CVSS0.00778EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/06/15 12:0 p.m.14 views

EUVD-2016-10890

WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive files like...

6.9CVSS5.4AI score0.00688EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/15 12:0 p.m.37 views

CVE-2016-20078 WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php

WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive files like...

6.9CVSS0.00688EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/06/15 12:0 p.m.10 views

CVE-2016-20078 WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php

WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the url parameter. Attackers can supply directory traversal sequences in GET requests to pic.php to access sensitive files like...

6.9CVSS5.4AI score0.00688EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/15 12:0 p.m.27 views

CVE-2016-20078

WordPress IMDb Profile Widget 1.0.8 contains a local file inclusion (LFI) vulnerability in pic.php that allows unauthenticated attackers to read arbitrary files via directory traversal in the URL. The impact includes potential exposure of sensitive data such as wp-config.php. CVSS metrics present...

6.9CVSS5.5AI score0.00688EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/15 10:5 a.m.26 views

CVE-2026-34030

The CVE concerns Wertheim SafeController Software (AssemblyVersion 6.15.8328.28014) where branch code validation is insufficient during new-branch creation. The branch code is later used in functions that generate filesystem paths for uploaded files, profile pictures, and settings. An authenticat...

6.9CVSS5.4AI score0.00327EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/06/15 10:5 a.m.12 views

CVE-2026-34030 Improper branch-code validation in Wertheim SafeController Software allows file path manipulation

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the branch code when a new branch is created. The branch code is later used in multiple application functions, including filesystem path generation for uploaded files, profile pictures, and...

6.9CVSS5.3AI score0.00327EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/06/15 10:5 a.m.12 views

EUVD-2026-36713

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the branch code when a new branch is created. The branch code is later used in multiple application functions, including filesystem path generation for uploaded files, profile pictures, and...

6.9CVSS5.4AI score0.00327EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/06/15 10:5 a.m.42 views

CVE-2026-34030 Improper branch-code validation in Wertheim SafeController Software allows file path manipulation

The Wertheim SafeController Software, AssemblyVersion 6.15.8328.28014, does not sufficiently validate the branch code when a new branch is created. The branch code is later used in multiple application functions, including filesystem path generation for uploaded files, profile pictures, and...

6.9CVSS0.00327EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/06/15 1:9 a.m.10 views

Directory Traversal

Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Directory Traversal via the userfilespath function of the API endpoint /apinosession/thumbnailimg when processing the cachepathrelative argument. An attacker can access o...

7.5CVSS6.5AI score0.00525EPSS
SaveExploits0References2
Rows per page
Query Builder