23402 matches found
CVE-2025-15637
CVE-2025-15637 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress Shuffle theme , affecting versions 1.8 and earlier . The flaw allows a remote attacker with no prior access to include arbitrary local files, potentially leading to full compromise of confidentiality, i...
CVE-2025-15637 WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...
EUVD-2025-210754
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...
WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Tonda Core versions 2.6...
WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Tonda versions 2.6...
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Cafe Pro versions 3.0.15...
WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Måne versions = 1.7...
WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Verdure Core versions = 1.2...
CVE-2026-75963
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...
EUVD-2026-63199
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...
CVE-2026-75963 Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...
CVE-2026-75963
The Events Made Easy WordPress plugin (all versions up to and including 3.2.5 ) is vulnerable to Local File Inclusion via the eme_single_event_page_template function, specifically through the wp_page_template event property. Authenticated attackers with contributor-level access or above can injec...
PT-2026-78950
Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...
CVE-2026-75963: Improper Control of Filename for Include/Require Statement in PHP Program
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...
PT-2026-81178
Name of the Vulnerable Software and Affected Versions Mane theme for WordPress versions prior to 1.8 Description The Mane theme for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, which can lead to the...
CVE-2025-15637: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...
CVE-2026-66586: Improper Control of Filename for Include/Require Statement in PHP Program
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
PT-2026-78954
Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...
PT-2026-78888
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the eme single event page template function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrar...