48851 matches found
CVE-2026-104899: Improper Control of Filename for Include/Require Statement in PHP Program
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.187 via the 'designtype' parameter parameter. This makes it possible for unauthenticated attackers to include and...
CVE-2026-42704: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Kids Care = 3.2.4 versions...
CVE-2026-66566: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Ambient = 1.7 versions...
CVE-2026-62115: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in KuteShop = 4.2.9 versions...
CVE-2026-62094: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in TechOne = 3.0.3 versions...
CVE-2026-62074: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Ozeum = 1.3.0 versions...
CVE-2026-62075: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Backhoe = 2.0 versions...
CVE-2026-62070: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Flipmart = 2.8 versions...
CVE-2026-62067: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Kaven = 1.2 versions...
CVE-2026-62066: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Volos = 1.2 versions...
CVE-2026-62065: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Cardea = 2.3 versions...
PT-2026-109818
Name of the Vulnerable Software and Affected Versions Ozeum versions prior to 1.3.1 Description An unauthenticated Local File Inclusion LFI issue exists, which allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer...
CVE-2026-62069: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Fabius = 1.0 versions...
CVE-2026-62068: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Teoro = 1.1 versions...
CVE-2026-62032: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in DirectoryPress = 3.6.27 versions...
CVE-2026-62092: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Armania = 1.4.8 versions...
CVE-2026-62099: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Boutique = 2.3.3 versions...
PT-2026-109816
Name of the Vulnerable Software and Affected Versions Fabius versions prior to 1.1 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without providing credentials. Recommendations Update to a version newer than 1.0...
PT-2026-109827
Name of the Vulnerable Software and Affected Versions Armania versions prior to 1.4.9 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without providing credentials. Recommendations Update to a version newer than 1.4.8...