EUVD-2026-96104

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...

CVE-2026-104899 GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameter

The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...

CVE-2026-62032: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in DirectoryPress = 3.6.27 versions...

CVE-2026-62096: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Biolife = 3.2.3 versions...

PT-2026-109817

Name of the Vulnerable Software and Affected Versions Flipmart versions prior to 2.9 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer than 2.8...

CVE-2026-62099: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Boutique = 2.3.3 versions...

CVE-2026-62092: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Armania = 1.4.8 versions...

CVE-2026-42777: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Aalto = 1.8 versions...

PT-2026-109785

Name of the Vulnerable Software and Affected Versions CleanSkin versions prior to 1.5.1 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer than...

PT-2026-109786

Name of the Vulnerable Software and Affected Versions Aalto versions prior to 1.9 Description An unauthenticated Local File Inclusion LFI issue exists, which allows an attacker to read arbitrary files from the local file system without requiring authentication. Recommendations Update to a version...

PT-2026-109788

Name of the Vulnerable Software and Affected Versions Uminex versions prior to 1.1.0 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read arbitrary files from the local file system without requiring authentication. Recommendations Update to a version newe...

CVE-2026-62068: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Teoro = 1.1 versions...

PT-2026-109812

Name of the Vulnerable Software and Affected Versions Cardea versions prior to 2.4 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without providing credentials. Recommendations Update to a version newer than 2.3...

PT-2026-109772

Name of the Vulnerable Software and Affected Versions Kids Care versions prior to 3.2.5 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without providing credentials. Recommendations Update to a version newer than 3.2...

PT-2026-109827

Name of the Vulnerable Software and Affected Versions Armania versions prior to 1.4.9 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without providing credentials. Recommendations Update to a version newer than 1.4.8...

PT-2026-109819

Name of the Vulnerable Software and Affected Versions Backhoe versions prior to 2.1 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without providing credentials. Recommendations Update to a version newer than 2.0...

PT-2026-109831

Name of the Vulnerable Software and Affected Versions Biolife versions prior to 3.2.4 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without providing credentials. Recommendations Update to a version newer than 3.2.3...

PT-2026-109829

Name of the Vulnerable Software and Affected Versions TechOne versions prior to 3.0.4 Description An unauthenticated Local File Inclusion issue exists, which allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer tha...

PT-2026-109799

Name of the Vulnerable Software and Affected Versions DirectoryPress versions 3.x and earlier Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to include files from the local file system without authentication. Recommendations Update DirectoryPress to a versi...

PT-2026-109789

Name of the Vulnerable Software and Affected Versions DukaMarket versions prior to 1.3.1 Description An unauthenticated Local File Inclusion LFI exists, which allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer th...