112 matches found
CVE-2026-112820 WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1...
CVE-2026-112820
The Elated-Themes Academist Core WordPress plugin is vulnerable to PHP Local File Inclusion (LFI) due to improper control of filenames in include/require statements. This flaw affects versions up to and including 1.4.1 . While the vulnerability is confirmed, specific exploit details and remediati...
CVE-2026-112820 WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1...
EUVD-2026-108110
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1...
CVE-2026-66670: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
CVE-2026-28152: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
CVE-2026-28150: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...
CVE-2026-28570: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Vavo Core = 2.3.0 versions...
CVE-2026-66450: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...
CVE-2026-65477: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Tonda Core = 2.1.2 versions...
CVE-2026-57805: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.This issue affects Tonda: from n/a through = 2.5...
CVE-2026-15540: Improper Control of Filename for Include/Require Statement in PHP Program
A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrative Interface. Performing a manipulation of the argument page results in improper control of filename for include/requi...
CVE-2025-68064: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Goya Core 1.0.9.4 versions...
CVE-2025-69174: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Etude = 1.6 versions...
CVE-2026-39549: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Aperitif = 1.5 versions...
CVE-2025-49403: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Arbitrary File Download in Premium Age Verification / Restriction for WordPress = 3.0.2 versions...
CVE-2026-39590: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Atomlab = 2.4.5 versions...
CVE-2025-69167: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Eros = 1.3 versions...