CVE-2026-62020: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in TouchUp 1.4 versions...

CVE-2026-48193: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Uminex = 1.0.9 versions...

CVE-2026-48194: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in DukaMarket = 1.3.0 versions...

CVE-2026-42724: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in CleanSkin = 1.5.0 versions...

PT-2026-109818

Name of the Vulnerable Software and Affected Versions Ozeum versions prior to 1.3.1 Description An unauthenticated Local File Inclusion LFI issue exists, which allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer...

WordPress GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin <= 2.8.187 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin GeoDirectory versions = 2.8.187...

CVE-2026-94067

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5...

EUVD-2026-95788

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5...

CVE-2026-94067 WordPress The Voux theme <= 6.9.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5...

CVE-2026-94067

The Fuelthemes The Voux WordPress theme (versions ≤ 6.9.5 ) is vulnerable to a PHP Local File Inclusion (LFI) flaw. The root cause is the Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98). While the specific component or function is not detailed in the provided do...

CVE-2026-94062

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3...

EUVD-2026-95762

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3...

CVE-2026-94062 WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3...

CVE-2026-94062

The Fuelthemes Werkstatt WordPress theme (versions ≤ 4.8.3 ) is vulnerable to a PHP Local File Inclusion (LFI) flaw. The root cause is the Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98). This vulnerability allows an attacker to include local files on the server...

WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by 0xzenko in WordPress Plugin DirectoryPress versions = 3.6.27...

CVE-2023-6553

CVE-2023-6553 PHP File Inclusion Leading to RCE — Backup Migration Plugin Plugin: Backup Migration backup-backup ≤ 1.3.7 CVSS: 9.8 Critical CWE: CWE-98 — Improper Control of Filename for Include/Require Statement Authentication Requirement: None Impact: Remote Code Execution 1. What is this...

Gladinet CentreStack & TrioFox - Local File Inclusion

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

PT-2026-108917

Name of the Vulnerable Software and Affected Versions Fuelthemes The Voux versions prior to 6.9.5 Description Fuelthemes The Voux contains an improper control of filename for include/require statement in PHP program, which allows for PHP Local File Inclusion. This occurs when the application fail...

CVE-2026-94067: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5...

CVE-2026-94062: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3...