23402 matches found
CVE-2026-76210
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Shuffle versions = 1.8...
WordPress GenesisExpo Core plugin <= 1.3.9 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin GenesisExpo Core versions = 1.3.9...
CVE-2026-73387
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
CVE-2026-73387 WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
CVE-2026-73387
The Resido WordPress theme (versions ≤ 1.5) contains an unauthenticated Local File Inclusion vulnerability exploitable over the network with high complexity, no privileges required, and no user interaction. CVSS 3.1 scores it HIGH (8.1) with full impact on confidentiality, integrity, and availabi...
EUVD-2026-62388
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
WordPress MedXtore – Responsive Multipurpose Elementor WooCommerce WordPress Theme theme <= 3.3.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme MedXtore – Responsive Multipurpose Elementor WooCommerce WordPress Theme versions = 3.3.4...
WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme <= 2.7 - Local File Inclusion vulnerability
WordPress KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme theme = 2.7 - Local File Inclusion vulnerability discovered by Phat RiO in WordPress Theme KidXtore - Kids Clothing and Toys Store Elementor WooCommerce WordPress Theme versions = 2.7...
WordPress HUSKY - Products Filter Professional for WooCommerce plugin < 1.4.1 - Shop Manager+ Local File Inclusion via meta_filter search_view vulnerability
WordPress HUSKY - Products Filter Professional for WooCommerce plugin 1.4.1 - Shop Manager+ Local File Inclusion via metafilter searchview vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin HUSKY versions 1.4.1...
WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Golo Framework versions 1.7.5...
WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Cafe Pro versions 3.0.15...
WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Resido versions = 1.5...
PT-2026-78941
Name of the Vulnerable Software and Affected Versions Shuffle versions 1.8 and earlier Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read arbitrary files from the local file system without requiring authentication. Recommendations Update Shuffle to a...
PT-2026-78392
Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description Insufficient sanitization of HTML in FAQ answers occurs before generating PDFs via TCPDF. An attacker with permissions to create or edit FAQ content can embed an tag with a src attribute referencing...
PT-2026-78344
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
CVE-2026-73387: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
CVE-2026-73400
Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress = 2.4.11 versions...