CVE-2026-73367

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-32464

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-28570

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

EUVD-2026-60806

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

CVE-2026-73400 WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...

CVE-2026-73400

WordPress Restaurant Menu by MotoPress plugin versions ≤ 2.4.11 contains an unauthenticated Local File Inclusion vulnerability, allowing remote attackers to read arbitrary files (CVSS 8.1 HIGH). Patchstack is the CNA; no exploitation evidence is provided in the documents.

EUVD-2026-60789

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-73367 WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

CVE-2026-73367

The WordPress plugin Easy Google Maps (slug google-maps-easy) is vulnerable to unauthenticated Remote File Inclusion (RFI) in versions prior to 1.14.2 . The flaw allows a network attacker with no authentication to include arbitrary remote files, potentially affecting confidentiality and integrity...

CVE-2026-73367

Unauthenticated Remote File Inclusion in Easy Google Maps 1.14.2 versions...

EUVD-2026-60900

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32464 WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32464

The WordPress plugin Theme Test Drive (versions ≤ 2.9.1) is affected by an unauthenticated Local File Inclusion vulnerability discovered by Steven Julian, allowing remote attackers to read arbitrary server files without authentication (CVSS 8.1 HIGH). Patchstack reports the flaw but no patch vers...

CVE-2026-32464

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-28570

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

CVE-2026-28570 WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

CVE-2026-28570 WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

EUVD-2026-60895

Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...

CVE-2026-28570

The WordPress plugin Vavo Core (versions ≤ 2.3.0) is vulnerable to unauthenticated Local File Inclusion, allowing remote attackers to read or include arbitrary server files without authentication. CVSS 3.1 scores it HIGH (8.1). No patch version or remediation is provided in the documents; upgradi...