CVE-2026-94062: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3...

PT-2026-108903

Name of the Vulnerable Software and Affected Versions Fuelthemes Werkstatt versions prior to 4.8.3 Description Fuelthemes Werkstatt contains an improper control of filename for include/require statement in PHP program, which allows for PHP Local File Inclusion. This occurs when the application...

CVE-2025-15368-Exploit

CVE-2025-15368 Exploit Tool SportsPress Plugin for WordPress = 2.7.26 - LFI & RCE Author: kazehere4you Date: 2026-02-11 Description This tool exploits a Local File Inclusion LFI vulnerability in the SportsPress plugin for WordPress versions up to and including 2.7.26. By leveraging the eventlist...

WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Backhoe versions = 2.0...

WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Ozeum versions = 1.3.0...

WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Flipmart versions = 2.8...

WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Teoro versions = 1.1...

WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Fabius versions = 1.0...

WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kaven versions = 1.2...

WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Volos versions = 1.2...

WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Cardea versions = 2.3...

WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Ambient versions = 1.7...

VulnCheck KEV: CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

GHSA-F7V3-XHM6-W245 Backstage has improper input validation in TechDocs Markdown extension configuration

Impact An authenticated user who can register or modify documentation sources may cause a TechDocs build to access resources outside the intended documentation boundary. Depending on deployment configuration, this may expose sensitive backend-host data or internal network resources. Patches Patch...

Backstage has improper input validation in TechDocs Markdown extension configuration

Impact An authenticated user who can register or modify documentation sources may cause a TechDocs build to access resources outside the intended documentation boundary. Depending on deployment configuration, this may expose sensitive backend-host data or internal network resources. Patches Patch...

WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme DukaMarket versions = 1.3.0...

WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Uminex versions = 1.0.9...

WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Kids Care versions = 3.2.4...

WordPress The Voux theme <= 6.9.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme The Voux versions = 6.9.5...

WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Werkstatt versions = 4.8.3...