23402 matches found
EUVD-2026-64791
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
CVE-2026-28152
CVE-2026-28152 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress plugin Tonda Core , affecting versions below 2.6 . Discovered by Tran Nguyen Bao Khanh (VCI – VNPT Cyber Immunity), the flaw allows an unauthenticated remote attacker to include local files, resulting i...
EUVD-2026-64790
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-28152 WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
CVE-2026-28151 WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-66671 WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
CVE-2026-66671 WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
EUVD-2026-64789
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
CVE-2026-66671
An unauthenticated Local File Inclusion (LFI) vulnerability affects the WordPress plugin Verdure Core in versions
WordPress WANotifier plugin < 2.6 - Subscriber+ LFI vulnerability
Subscriber+ LFI vulnerability discovered by Project Black in WordPress Plugin Notifier versions 2.6...
WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability
WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin = 1.4 - Local File Inclusion vulnerability discovered by Jamaal ahmed in WordPress Plugin MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator versions = 1.4...
PT-2026-80844
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
CVE-2026-32560: Improper Control of Filename for Include/Require Statement in PHP Program
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...
PT-2026-80823
Unauthenticated Local File Inclusion in Tonda 2.6 versions...
CVE-2026-66670: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Måne = 1.7 versions...
CVE-2026-66671: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...
PT-2026-80824
Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...
PT-2026-81050
Name of the Vulnerable Software and Affected Versions MagicAI for WordPress versions 1.4 and earlier Description A Local File Inclusion issue exists that allows users with Subscriber privileges to read arbitrary files on the server. Recommendations Update MagicAI for WordPress to a version later...