CVE-2026-32560

MagicAI for WordPress (AI Text, Image, Chat, Code, and Voice Generator) plugin versions ≤ 1.4 are affected by a Local File Inclusion (LFI) vulnerability accessible to authenticated users with the Subscriber role. The vulnerability is rated CVSS 8.8 (HIGH) by Patchstack, with a network attack vect...

CVE-2026-32560 WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

CVE-2026-66670

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

CVE-2026-66671

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

CVE-2026-66587

Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28152

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-66670

This is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress Måne theme (versions

CVE-2026-66670 WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

EUVD-2026-64810

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

CVE-2026-66670 WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

CVE-2026-66587

WP Cafe Pro is a WordPress plugin affected by an unauthenticated Local File Inclusion (LFI) vulnerability in versions prior to 3.0.15 . Discovered by Ananda Dhakal via Patchstack, the flaw requires no authentication or user interaction and is scored CVSS 9.8 (Critical) with full confidentiality, ...

CVE-2026-66587 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...

EUVD-2026-64806

Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...

CVE-2026-66587 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...

CVE-2026-28152

CVE-2026-28152 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress plugin Tonda Core , affecting versions below 2.6 . Discovered by Tran Nguyen Bao Khanh (VCI – VNPT Cyber Immunity), the flaw allows an unauthenticated remote attacker to include local files, resulting i...

CVE-2026-28151

Unauthenticated Local File Inclusion in the WordPress Theme Tonda (versions

CVE-2026-28152 WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28151 WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

EUVD-2026-64791

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...