48516 matches found
WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme <= 2.7 - Local File Inclusion vulnerability
WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme = 2.7 - Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme versions = 2.7...
WordPress HUSKY - Products Filter Professional for WooCommerce plugin < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view vulnerability
WordPress HUSKY - Products Filter Professional for WooCommerce plugin 1.4.1 - Shop Manager+ Local File Inclusion via metafilter searchview vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin HUSKY versions 1.4.1...
WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Golo Framework versions 1.7.5...
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Cafe Pro versions 3.0.15...
WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Resido versions = 1.5...
CVE-2026-14978: Improper Handling of Unicode Encoding
HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...
CVE-2026-73387: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
PT-2026-78344
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
PT-2026-78711
HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...
PT-2026-78941
Name of the Vulnerable Software and Affected Versions Shuffle versions 1.8 and earlier Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read arbitrary files from the local file system without requiring authentication. Recommendations Update Shuffle to a...
PT-2026-78392
Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description Insufficient sanitization of HTML in FAQ answers occurs before generating PDFs via TCPDF. An attacker with permissions to create or edit FAQ content can embed an tag with a src attribute referencing...
File Inclusion postcss Dependency in Crowd Data Center
This High severity File Inclusion vulnerability was introduced in versions 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated attacker t...
CVE-2026-68922
creationtimestamp| type| source ---|---|--- 2026-08-18 20:35:06+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8j49-mmcx-4mp5...
CVE-2026-73400
Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...
CVE-2026-73367
Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...
CVE-2026-32464
Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...
CVE-2026-28570
Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...
CVE-2026-73400 WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...
CVE-2026-73400
CVE-2026-73400 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress plugin Restaurant Menu by MotoPress , affecting versions 2.4.11 and below . The flaw allows a remote, unauthenticated attacker to include and read local files on the server, potentially leading to full ...
