CVE-2026-16263

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute arbitrary existing local PHP files on...

CVE-2026-16263

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute arbitrary existing local PHP files on...

CVE-2026-16263 WP Maps < 4.9.7 - Subscriber+ Local File Inclusion

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute arbitrary existing local PHP files on...

CVE-2026-16263 WP Maps < 4.9.7 - Subscriber+ Local File Inclusion

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute arbitrary existing local PHP files on...

EUVD-2026-54391

The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly validate a user-controlled path before using it in a file inclusion, allowing users with a Subscriber account to include and execute arbitrary existing local PHP files on...

CVE-2026-16263

CVE-2026-16263: WP Maps WordPress plugin prior to 4.9.7 is vulnerable due to a missing capability check in an AJAX action and insufficient validation of a user-controlled path used in a local file inclusion. This allows users with a Subscriber account to include and execute arbitrary existing loc...

File Inclusion rollup Dependency in Jira Software Data Center

This High severity File Inclusion vulnerability was introduced in versions 9.17.5 and 11.3.8 of Jira Software Data Center. This File Inclusion vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E: P allows an unauthenticate...

CVE-2026-66710

Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...

CVE-2026-66710 WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...

EUVD-2026-53913

Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...

CVE-2026-66710 WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in e2pdf = 1.32.40 versions...

CVE-2026-66710

Technical details are not publicly available in the provided documents. The CVE-2026-66710 entry states an Unauthenticated Local File Inclusion in WordPress e2pdf plugin

CVE-2026-19011

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19009

A weakness has been identified in TinyAGI 0.0.20. This issue affects the function collectFiles of the file packages/core/src/response.ts of the component Message API Endpoint. This manipulation causes file inclusion. The attack can be initiated remotely. The exploit has been made available to the...

CVE-2026-19011 TinyAGI agents.ts buildSystemPrompt file inclusion

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19011

CVE-2026-19011 affects TinyAGI 0.0.20. The vulnerable element is the function buildSystemPrompt in packages/server/src/routes/agents.ts, where manipulation can cause file inclusion. The attack may be initiated remotely and, per the description, the exploit is public. No remediation details are pr...

EUVD-2026-53791

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19011

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

CVE-2026-19011 TinyAGI agents.ts buildSystemPrompt file inclusion

A vulnerability was detected in TinyAGI 0.0.20. The affected element is the function buildSystemPrompt of the file packages/server/src/routes/agents.ts. Performing a manipulation results in file inclusion. The attack may be initiated remotely. The exploit is now public and may be used. The projec...

EUVD-2026-53767

A weakness has been identified in TinyAGI 0.0.20. This issue affects the function collectFiles of the file packages/core/src/response.ts of the component Message API Endpoint. This manipulation causes file inclusion. The attack can be initiated remotely. The exploit has been made available to the...