13 matches found
CVE-2026-66653
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
CVE-2026-66653
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
EUVD-2026-57892
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
CVE-2026-66653 WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
CVE-2026-66653 WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
CVE-2026-66653
CVE-2026-66653 corresponds to an unauthenticated Local File Inclusion in WordPress Barista theme (versions <= 2.5.1). The vulnerability affects the Barista theme’s file handling, enabling LFI with a high severity (CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Root cause details are stated as...
CVE-2026-66653: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...
WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Barista versions = 2.5.1...
PT-2026-71579
Name of the Vulnerable Software and Affected Versions Barista versions prior to 2.5.2 Description The Barista theme for WordPress allows unauthenticated attackers to include and execute arbitrary files on the server. This occurs through a Local File Inclusion LFI flaw, which is a vulnerability th...
com.markelliot.barista:barista (>=0.14.0, <=0.20.0), com.markelliot.barista:barista-conjure (>=0.14.0, <=0.20.0) +83 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (2.3.0.beta1)
io.undertow:undertow-core MAVEN version 2.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.markelliot.barista:barista =0.14.0, =0.14.0, =0.14.0, =7.8.0-rc2, =7.8.0-rc2, =7.8.0-rc2, =7.8.0-rc...
barista-shop.gr Improper Access Control vulnerability OBB-3827011
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
com.markelliot.barista:barista (0.9.0), com.markelliot.barista:barista-conjure (0.9.0) +40 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (2.3.0.alpha1)
io.undertow:undertow-core MAVEN version 2.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.markelliot.barista:barista 0.9.0 - com.markelliot.barista:barista-conjure 0.9.0 -...
Barista Coffee Art Design Cafe - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Barista Coffee Art Design Cafe published at the 'play' market has multiple vulnerabilities...