48639 matches found
CVE-2025-58902 WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Lighthouse = 1.2.12 versions...
CVE-2025-58902 WordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Lighthouse = 1.2.12 versions...
CVE-2025-58902
CVE-2025-58902 affects the WordPress Lighthouse theme (versions <= 1.2.12). It is an unauthenticated Local File Inclusion (LFI) vulnerability in Lighthouse
CVE-2025-58902
Unauthenticated Local File Inclusion in Lighthouse = 1.2.12 versions...
WordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by w41bu1 in WordPress Plugin SportsPress Pro versions = 2.7.29...
WordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Rafie Muhammad in WordPress Plugin Shopify versions = 1.0.0...
PT-2026-54984
Unauthenticated Local File Inclusion in Audrey = 1.5 versions...
CVE-2026-57748: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Shopify = 1.0.0 versions...
PT-2026-55037
Name of the Vulnerable Software and Affected Versions SportsPress Pro versions 2.7.29 and earlier Description A Local File Inclusion LFI issue exists where users with Contributor privileges can read local files on the server. Local File Inclusion is a vulnerability that allows an attacker to indu...
PT-2026-55289
Name of the Vulnerable Software and Affected Versions Cockpit CMS versions prior to 364 Description Unauthenticated attackers can read arbitrary files or execute PHP files due to a path traversal and local file inclusion issue. The application fails to perform containment checks when constructing...
CVE-2026-57749: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in SportsPress Pro = 2.7.29 versions...
CVE-2025-69133: Improper Control of Filename for Include/Require Statement in PHP Program
Subscriber Local File Inclusion in Tourmaster = 5.4.5 versions...
PT-2026-54959
Unauthenticated Local File Inclusion in Lighthouse = 1.2.12 versions...
CVE-2025-58902: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Lighthouse = 1.2.12 versions...
PT-2026-56962
Name of the Vulnerable Software and Affected Versions CodexThemes TheGem Theme Elements for Elementor versions prior to 5.11.2 Description An improper control of filenames for include/require statements allows for Local File Inclusion. Authenticated attackers with contributor-level access or high...
CVE-2026-27412: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Pearl - Corporate Business = 3.4.10 versions...
CVE-2026-42382: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Audrey = 1.5 versions...
PT-2026-55036
Contributor Local File Inclusion in Shopify = 1.0.0 versions...
CVE-2026-58467: Improper Limitation of a Pathname to a Restricted Directory
Cockpit CMS through 2.14.0 contains a path traversal and local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files or execute PHP files by including unvalidated PATHINFO derived from REQUESTURI in filesystem path construction without containment checks...
PT-2026-54975
Name of the Vulnerable Software and Affected Versions Pearl - Corporate Business versions prior to 3.4.11 Description An unauthenticated Local File Inclusion LFI issue exists, which allows an attacker to read files from the local file system without requiring authentication. Recommendations Updat...