CVE-2026-66450 WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450

CVE-2026-66450 refers to an Unauthenticated Local File Inclusion in the WordPress plugin Geo Mashup, affected versions

WordPress Finale Lite plugin <= 2.20.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Finale Lite versions = 2.20.0...

WordPress NextMove Lite plugin <= 2.24.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin NextMove Lite versions = 2.24.0...

CVE-2026-66653: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

CVE-2026-73574: Incorrect Resource Transfer Between Spheres

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-66657: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66656: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66450: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

PT-2026-71680

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 10.1.17 Description A local file inclusion LFI issue exists in the Zimbra Classic Web Client within the Forward servlet. This is caused by improper validation of the fu request parameter, which allows an...

PT-2026-71583

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

PT-2026-71559

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

PT-2026-71582

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-58420: Improper Access Control

Local File Inclusion via file:// URI in Migration Restore...

PT-2026-71579

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

CVE-2026-67285

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

CVE-2026-67285 Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...

CVE-2026-67285

SP Page Builder (Joomla extension) from joomshaper.com is affected by an unauthenticated local PHP file inclusion in versions before 6.8.0. The issue allows an unauthenticated attacker to include arbitrary PHP files accessible by the system. CVSS metrics indicate a high impact on confidentiality,...

CVE-2026-67285

Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system...