CVE-2026-67285

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

CVE-2026-67285 Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

CVE-2026-67285

SP Page Builder (Joomla extension) from joomshaper.com is affected by an unauthenticated local PHP file inclusion in versions before 6.8.0. The issue allows an unauthenticated attacker to include arbitrary PHP files accessible by the system. CVSS metrics indicate a high impact on confidentiality,...

CVE-2026-67285

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

EUVD-2026-57213

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

CVE-2026-67285 Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

CVE-2026-67285: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

The WordPress E2Pdf file contains a vulnerability

WordPress E2Pdf is a plugin designed specifically for WordPress. Its core functionality involves creating and editing PDF documents and forms directly from the site backend. It also supports automatically converting post, page, or form content into dynamic/static PDF outputs. WordPress E2Pdf has ...

PT-2026-71078

Name of the Vulnerable Software and Affected Versions SP Page Builder versions prior to 6.8.0 Description An unauthenticated attacker can perform local PHP file inclusion, allowing them to include arbitrary PHP files accessible by the system. Recommendations Update SP Page Builder to version 6.8....

WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Barista versions = 2.5.1...

WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Foton Core versions = 1.1.1...

WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Biagiotti Core versions = 2.1.1...

Ray 2.56.0 Local File Inclusion / Directory Traversal

This proof of concept demonstrates a directory traversal and local file inclusion vulnerability in Ray's /logs API. By supplying a crafted glob filter, a remote unauthenticated attacker can access files outside the intended log directory. Version 2.56.0 is affected. Exploit Title: Ray 2.56.0 -...

Ray 2.56.0 - Directory Traversal & Local File Inclusion

Exploit Title: Ray 2.56.0 - Directory Traversal & Local File Inclusion Date: 07/12/2026 Google Dork: N/A Exploit Author: Richard Howe [email protected] Vendor Homepage: https://github.com/ray-project/ray Software Link: https://github.com/ray-project/ray Version: 2.56.0 Tested on: Ubuntu 22.04 an...

CVE-2026-13170

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...

CVE-2026-13170 Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...

CVE-2026-13170

The Eventin WordPress plugin (specifically the WP Event Solution plugin) versions prior to 4.1.20 is vulnerable to a Local File Inclusion (LFI) . The root cause is the failure to properly validate a template path setting, specifically the speaker_template setting, before using it to include a loc...

EUVD-2026-55023

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...

CVE-2026-13170

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...

CVE-2026-13170: Improper Limitation of a Pathname to a Restricted Directory

The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...