WordPress SiteOrigin Widgets Bundle plugin <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by kiemtiendinhau in WordPress Plugin SiteOrigin Widgets Bundle versions = 1.73.2...

CVE-2026-92174

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary...

ThinkCMF_getshell

Vulnerabilidad de inclusión de contenido arbitrario en el framework ThinkCMFgetshell Los atacantes remotos pueden ejecutar código arbitrario en el servidor remoto mediante la construcción de paquetes de solicitud específicos, sin necesidad de ningún privilegio. Uso de python: + python...

CVE-2023-6553

CVE-2023-6553 Inclusión de archivos en PHP que conduce a RCE — Plugin Backup Migration Plugin: Backup Migration backup-backup ≤ 1.3.7 CVSS: 9.8 Crítico CWE: CWE-98 — Control inadecuado del nombre de archivo para la declaración Include/Require Requisito de autenticación: Ninguno Impacto: Ejecución...

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion El plugin no impide que atacantes no autenticados sobrescriban variables locales al renderizar plantillas a través de la API REST, lo que puede conducir a ataques de inclusión local de archivos Local File Inclusion. Uso: usage: PoC.py ...

CVE-2026-92174

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 1.73.2 . The flaw exists in the 'theme' parameter and is triggered because update_fields() only processes declared form fields, allowing an attacker to bypass validat...

CVE-2026-92174 SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameter

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary...

EUVD-2026-91178

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary...

CVE-2024-54374

CVE-2024-54374 Sogrid = 1.5.6 - Inclusión de archivos locales no autenticada Descripción El plugin Sogrid para WordPress es vulnerable a la Inclusión de Archivos Locales en versiones hasta la 1.5.6, inclusive. Esto hace posible que atacantes no autenticados incluyan y ejecuten archivos arbitrario...

FDsploit

一个文件包含与目录遍历的模糊测试、枚举与利用工具。 FDsploit 菜单： $ python fdsploit.py -h | | \ | ||| | | | | | -| . | | . | | | || |/|| ||||| ||...ver. 1.2 Author: Christoforos Petrou game0ver ! usage: fdsploit.py -u | -f -h -p -d -e 0,1,2 -t -b -x -c -v --params ... -k -a --cmd --lfishell None,simple,expect,input...

CVE-2022-46364-htb-ctf

DevArea SOAP 利用工具 CVE-2022-46364 描述 此专用漏洞利用工具针对 Hack The Box 上的 DevArea 环境。它利用 Apache CXF 3.2.14 中的一个关键漏洞 CVE-2022-46364 来执行 本地文件包含 LFI 和 服务器端请求伪造 SSRF 。 该脚本滥用了 MTOM/XOP （消息传输优化机制）处理引擎。通过注入一个 元素，我们强制服务器的 AttachmentDeserializer 获取本地系统文件或内部网络资源，并将它们反射回 SOAP 响应中。 特性 自动化的多部分构造： 处理触发 XOP 处理所需的复杂...

Argus Surveillance DVR 4.0.0.0 - Local File Inclusion

Argus Surveillance DVR 4.0.0.0 devices allow unauthenticated local file inclusion, leading to file disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE parameter. id: CVE-2018-15745 info: name: Argus Surveillance DVR 4.0.0.0 - Local File Inclusion author: gy741 severity: high description: |...

PRTG Network Monitor - Local File Inclusion

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges including administrator. A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local...

WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion

WordPress Duplicator 1.3.24 & 1.3.26 are vulnerable to local file inclusion vulnerabilities that could allow attackers to download arbitrary files, such as the wp-config.php file. According to the vendor, the vulnerability was only in two versions v1.3.24 and v1.3.26, the vulnerability wasn't...

ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion

ZOHO WebNMS Framework before version 5.2 SP1 is vulnerable local file inclusion which allows an attacker to read arbitrary files via a .. dot dot in the fileName parameter to servlets/FetchFile. id: CVE-2016-6601 info: name: ZOHO WebNMS Framework 5.2 SP1 - Local File Inclusion author: 0xAkoko...

CVE-2026-12227-visualcomposer-lfi-poc

CVE-2026-12227 - Laboratorio de validación de LFI no autenticado en Visual Composer mediante vcv-template Material de investigación de seguridad para reproducir y validar CVE-2026-12227 : una inclusión local de archivos no autenticada en la resolución de plantillas de página del Visual Composer...

TongDa-RCE

TongDa-RCE La inclusión de archivos de Tongda + la subida de archivos provoca RCE Instrucciones de uso RCE remoto: python3 tongdarce.py targert getsehll: python3 tongdashell.py target...

grafana-unauth-file-read

grafana-unauth-file-read : CVE-2021-43798 Lectura no autorizada de archivos en Grafana 0day Parece que el nuevo 0day LFI en Grafana existe gracias al plugin grafana-clock-panel. Basta con enviar una petición GET de la forma: GET /public/plugins/grafana-clock-panel/../../../../../../../etc/passwd...

PT-2026-104082

Name of the Vulnerable Software and Affected Versions SiteOrigin Widgets Bundle versions prior to 1.73.3 Description The SiteOrigin Widgets Bundle plugin for WordPress contains a Local File Inclusion flaw. Authenticated attackers with contributor-level access or higher can include and execute...

CVE-2025-11973

触发：通过 file:// 读取 /etc/passwd 并外泄到上传目录 curl -sS -A "$UA" -X POST "$BASE/?kdsflag=post" \ --data-urlencode "kdspassword=$SECRET" \ --data-urlencode "posttitle=sub1-lfi" \ --data-urlencode "kdsfeatureurl=file:///etc/passwd" 检索已外泄的文件 计算存储的文件名 HASH=$printf 'file:///etc/passwd' | md5sum | awk 'print $1...