Lucene search
+L

42558 matches found

Cvelist
Cvelist
added 2026/03/25 4:14 p.m.36 views

CVE-2026-22494 WordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Good Homes good-homes allows PHP Local File Inclusion.This issue affects Good Homes: from n/a through = 1.3.13...

8.1CVSS0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.7 views

CVE-2026-22495 WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: from n/a through = 1.3.2...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.4 views

CVE-2026-22494 WordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Good Homes good-homes allows PHP Local File Inclusion.This issue affects Good Homes: from n/a through = 1.3.13...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.15 views

CVE-2026-22498

CVE-2026-22498 corresponds to a Local File Inclusion in WordPress Laurent theme versions = 3.2 or the vendor-released patch; as a workaround, avoid including untrusted local files via PHP include/require in the affected theme. The vulnerability affects the WordPress Laurent theme’s inclusion mech...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.23 views

CVE-2026-22495

CVE-2026-22495 corresponds to a Local File Inclusion in the WordPress Greenville theme (AncoraThemes Greenville) up to version 1.3.2, caused by improper control of filenames in include/require statements. The CVSSv3.1 base score is 8.1 (HIGH) with network attack vector, high attack complexity, no...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.4 views

CVE-2026-22496 WordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local File Inclusion.This issue affects Hypnotherapy: from n/a through = 1.2.10...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.13 views

CVE-2026-22493

CVE-2026-22493 describes a Local File Inclusion in WordPress Gaspard theme (&lt;= 1.3) due to improper filename handling for PHP Include/Require. Impact may allow an attacker to disclose or manipulate local files via a PHP inclusion vector. The Red Hat and NVD records confirm the same vulnerabili...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.3 views

CVE-2026-22493 WordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Gaspard gaspard allows PHP Local File Inclusion.This issue affects Gaspard: from n/a through = 1.3...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.37 views

CVE-2026-22495 WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: from n/a through = 1.3.2...

8.1CVSS0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.30 views

CVE-2026-22498 WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through = 3.1...

8.1CVSS0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.30 views

CVE-2026-22493 WordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Gaspard gaspard allows PHP Local File Inclusion.This issue affects Gaspard: from n/a through = 1.3...

8.1CVSS0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.13 views

CVE-2026-22496

CVE-2026-22496 is a local file inclusion (PHP) vulnerability in the WordPress Hypnotherapy theme (Hypnotherapy) up to version 1.2.10. The issue arises from improper control of filenames in include/require statements (PHP RFI). Affected installations could be exploited remotely via the plugin/them...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.44 views

CVE-2026-22494

CVE-2026-22494 is a Local File Inclusion in ThemeREX Good Homes (WordPress theme)

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.10 views

WordPress plugin Triompher 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00519EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.9 views

WordPress plugin Gioia 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.12 views

PT-2026-27884

Name of the Vulnerable Software and Affected Versions NaturaLife Extensions versions n/a through 2.1 Description A flaw exists in NaturaLife Extensions that allows for PHP Local File Inclusion due to improper control of filename handling for Include/Require statements. This issue impacts the...

8.1CVSS5.8AI score0.00403EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.13 views

WordPress plugin Lella 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.12 views

WordPress plugin Dentalux 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.6 views

PT-2026-27980

Name of the Vulnerable Software and Affected Versions Mikado-Themes Rosebud versions through 1.4 Description A flaw exists in the handling of filenames used in include/require statements within the PHP code of Mikado-Themes Rosebud, leading to a PHP Local File Inclusion issue. This allows for the...

8.1CVSS5.9AI score0.00403EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.12 views

WordPress plugin Amoli 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Rows per page
Query Builder