23820 matches found
CVE-2025-68063
CVE-2025-68063 describes a Local File Inclusion flaw in the WordPress Splash – Sport Club WordPress Theme for Basketball, Football, Hockey, affecting versions
CVE-2025-68064
CVE-2025-68064 concerns a Local File Inclusion vulnerability in the WordPress Goya Core plugin, versions earlier than 1.0.9.4. The issue arises from a faulty file path handling in the plugin, enabling an attacker to access sensitive files. The CVSS 3.1 vector indicates remote access with high imp...
WordPress Goya Core plugin < 1.0.9.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Goya Core versions 1.0.9.4...
WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability
WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme = 4.4.3 - Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Splash - Sport Club WordPress Theme for Basketball, Football, Hockey versions = 4.4.3...
WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by endy in WordPress Plugin Panorama Viewer – 360 Degree Image + Video Viewer versions = 1.6.1...
PT-2026-52716
Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey = 4.4.3 versions...
CVE-2025-68063: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Splash - Sport Club WordPress Theme for Basketball, Football, Hockey = 4.4.3 versions...
PT-2026-52717
Contributor Local File Inclusion in Goya Core 1.0.9.4 versions...
CVE-2025-68064: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Goya Core 1.0.9.4 versions...
PT-2026-52817
Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer = 1.6.1 versions...
CVE-2026-57647: Improper Control of Filename for Include/Require Statement in PHP Program
Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer = 1.6.1 versions...
CVE-2026-54845
Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...
CVE-2026-54845
CVE-2026-54845 : Unauthenticated Local File Inclusion in the WordPress MDTF plugin (versions <= 1.3.8). The vulnerability affects the MDTF component of the WordPress plugin, enabling unauthorized access to local files. Root cause: Local File Inclusion in MDTF <= 1.3.8. Exploitation details ...
CVE-2026-54845
Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...
CVE-2026-54845 WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...
EUVD-2026-39372
Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...
CVE-2026-54845 WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...
CVE-2026-54845: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in MDTF = 1.3.8 versions...
PT-2026-52422
Name of the Vulnerable Software and Affected Versions MDTF versions prior to 1.3.9 Description An unauthenticated Local File Inclusion LFI issue exists, which allows an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer th...
DEBIAN-CVE-2026-39938
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have unauthenticated LFI through graphtheme and rrdtool IPC serialization hardening. This issue has been resolved in version 1.2.31...