Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

20781 matches found

Vulnrichment
Vulnrichment•added 2026/02/19 8:35 p.m.•4 views

CVE-2026-27343 WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusion.This issue affects Airtifact: from n/a through = 1.2.91...

7.5CVSS5.6AI score0.00423EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/19 8:35 p.m.•30 views

CVE-2026-27343 WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusion.This issue affects Airtifact: from n/a through = 1.2.91...

7.5CVSS0.00423EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/19 8:35 p.m.•23 views

CVE-2026-27343

CVE-2026-27343 affects WordPress Airtifact theme versions

7.5CVSS5.6AI score0.00423EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/19 3:16 p.m.•16 views

CVE-2025-55853

SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. The PDF converter function does not check if internal or external resources are requested in the uploaded files and allows for protocols such as http:// and file:///. This allows an attacker to upload an XML or HTM...

9.1CVSS0.00373EPSS
SaveExploits1References2
Patchstack
Patchstack•added 2026/02/19 10:24 a.m.•16 views

WordPress Prodigy Commerce plugin <= 3.2.9 - Unauthenticated Local File Inclusion via parameters[template_name] vulnerability

Unauthenticated Local File Inclusion via parameterstemplatename vulnerability discovered by WordFence in WordPress Plugin Prodigy Commerce versions = 3.2.9...

9.8CVSS5.5AI score0.09396EPSS
SaveExploits5References1Affected Software1
NVD
NVD•added 2026/02/19 9:16 a.m.•7 views

CVE-2026-27052

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce...

7.5CVSS0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/19 8:27 a.m.•2 views

CVE-2026-27052 WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce...

7.5CVSS5.3AI score0.00316EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/19 8:27 a.m.•5 views

CVE-2026-27052

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in VillaTheme Sales Countdown Timer for WooCommerce and WordPress allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce and WordPress: from n/a...

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2026/02/19 8:27 a.m.•42 views

CVE-2026-27052 WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce...

7.5CVSS0.00316EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/19 8:27 a.m.•27 views

CVE-2026-27052

CVE-2026-27052 affects the WordPress plugin VillaTheme Sales Countdown Timer for WooCommerce and WordPress (sctv-sales-countdown-timer) prior to version 1.1.9. The issue is Improper Control of Filename for Include/Require, i.e., a Local File Inclusion vulnerability in the plugin, allowing inclusi...

7.5CVSS5.9AI score0.00316EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/19 8:26 a.m.•7 views

CVE-2026-25326

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

5.5AI score0.0037EPSS
SaveExploits0References2
CVE
CVE•added 2026/02/19 8:26 a.m.•23 views

CVE-2026-25326

CVE-2026-25326 corresponds to a Local File Inclusion issue in the WordPress plugin CMSMasters Content Composer (cmsmasters-content-composer), affecting versions from n/a through 1.4.5. The vulnerability stems from improper control of filename for include/require statements, enabling LFI in CMSMas...

7.5CVSS5.5AI score0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/02/19 8:26 a.m.•3 views

CVE-2026-25326 WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

7.5CVSS5.6AI score0.0037EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/19 8:26 a.m.•36 views

CVE-2026-25326 WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.This issue affects CMSMasters Content Composer: from n/a through = 1.4.5...

7.5CVSS0.0037EPSS
SaveExploits0References1
NVD
NVD•added 2026/02/19 7:17 a.m.•15 views

CVE-2026-0926

The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameterstemplatename' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files or execute arbitrary files on the server...

9.8CVSS0.09396EPSS
SaveExploits5References6
Cvelist
Cvelist•added 2026/02/19 4:36 a.m.•301 views

CVE-2026-0926 Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]

The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameterstemplatename' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files or execute arbitrary files on the server...

9.8CVSS0.09396EPSS
SaveExploits5References6
CVE
CVE•added 2026/02/19 4:36 a.m.•54 views

CVE-2026-0926

Prodigy Commerce WordPress plugin

9.8CVSS6.5AI score0.09396EPSS
SaveExploits5References6
Vulnrichment
Vulnrichment•added 2026/02/19 4:36 a.m.•5 views

CVE-2026-0926 Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]

The Prodigy Commerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'parameterstemplatename' parameter. This makes it possible for unauthenticated attackers to include and read arbitrary files or execute arbitrary files on the server...

9.8CVSS6.4AI score0.09396EPSS
SaveExploits5References6
Vulnrichment
Vulnrichment•added 2026/02/19 12:0 a.m.•6 views

CVE-2025-55853

SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. The PDF converter function does not check if internal or external resources are requested in the uploaded files and allows for protocols such as http:// and file:///. This allows an attacker to upload an XML or HTM...

5.5AI score0.00373EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies•added 2026/02/19 12:0 a.m.•12 views

PT-2026-20760

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in villatheme Sales Countdown Timer for WooCommerce and WordPress sctv-sales-countdown-timer allows PHP Local File Inclusion.This issue affects Sales Countdown Timer for WooCommerce...

5.5AI score0.00316EPSS
SaveExploits0References1
Rows per page
Query Builder