EUVD-2026-65278

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the emoptionssave function. This makes it possible for authenticated attackers, with administrator-level access and above, to...

CVE-2026-14280 Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the emoptionssave function. This makes it possible for authenticated attackers, with administrator-level access and above, to...

EUVD-2026-65221

GitPython before 3.1.59 fails to disable mergeincludes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via include directives. Attackers can craft a malicious .gitmodules file with include directives pointing to sensitive files; when...

EUVD-2026-65165

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

Fonoster-LFI-PoC

CVE-2024-43035 - Fonoster LFI Prova di concetto Questo repository contiene uno script di prova di concetto PoC che dimostra una vulnerabilità di Local File Inclusion in Fonoster. Questo strumento è destinato esclusivamente a scopi educativi e di test autorizzati. Utilizzo Leggere un file locale P...

CVE-2017-12637_SAP-NetWeaver-URL-Traversal

CVE-2017-12637SAP-NetWeaver-URL-Traversal Scanner LFI proof-of-concept: rilevamento automatico delle esposizioni di /etc/passwd tramite directory traversal e corrispondenza regex. root@kitploit: Scanner LFI Un proof-of-concept Python leggero per scansionare host target per vulnerabilità di Local...

rwsploit

Oracle Reports rwservlet स्कैनर ⚠️ केवल अधिकृत उपयोग के लिए। इस टूल को केवल उन सिस्टमों पर चलाएँ जिनके स्वामी आप हैं या जिनके परीक्षण के लिए आपके पास स्पष्ट लिखित अनुमति है। अनधिकृत उपयोग अवैध है। Oracle Reports Server rwservlet के लिए एक केंद्रित शोषण स्कैनर जो CVE-2012-3152 और CVE-2012-3153 को...

PT-2026-81178

Name of the Vulnerable Software and Affected Versions Mane theme for WordPress versions prior to 1.8 Description The Mane theme for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, which can lead to the...

PT-2026-81217

Name of the Vulnerable Software and Affected Versions Verdure Core versions prior to 1.3 Description The Verdure Core plugin for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, enabling the execution of PH...

CVE-2023-34598

CVE-2023-34598 - Gibbon v25.0.0 LFI-Exploit Dieses Repository enthält ein Python-Skript, das dabei hilft, eine Local File Inclusion LFI-Schwachstelle CVE-2023-34598 in Gibbon v25.0.0 zu identifizieren und auszunutzen. Das Skript kann eine Ziel-Website auf eine mögliche Schwachstelle scannen und,...

CVE-2026-32560

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

CVE-2022-29597

CVE-2022-29597: Inclusione di File Locali in RSS v500 L'applicazione RRS v500 di Solutions Atlantic è vulnerabile a una vulnerabilità di Inclusione di File Locali LFI. Qualsiasi utente autenticato ha la possibilità di fare riferimento a file di sistema interni nelle richieste effettuate alla pagi...

cve-lfi-lab

🧠 Laboratorio CVE: Simulazione Analista SOC Livello 1 CVE-2025-39507 | Local File Inclusion nel Plugin Nasa Core di WordPress 📝 Scenario: Una Giornata nel SOC È un normale lunedì. Sono connesso al dashboard del SOC, esaminando gli avvisi come al solito. Ne arriva uno che attira la mia attenzione:...

CVE-2026-32560 WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

CVE-2026-32560 WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerability

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator = 1.4 versions...

CVE-2026-32560

MagicAI for WordPress (AI Text, Image, Chat, Code, and Voice Generator) plugin versions ≤ 1.4 are affected by a Local File Inclusion (LFI) vulnerability accessible to authenticated users with the Subscriber role. The vulnerability is rated CVSS 8.8 (HIGH) by Patchstack, with a network attack vect...

CVE-2024-34470

CVE-2024-34470 HSC Mailinspector 5.2.17-3 a 5.2.18 - Inclusione Locale di File...

CVE-2024-12209

CVE-2024-12209 WP Umbrella: Update Backup Restore & Monitoring = 2.17.0 - Inclusione di File Locale Non Autenticata Descrizione Il plugin WP Umbrella: Update Backup Restore & Monitoring per WordPress è vulnerabile all'Inclusione di File Locale in tutte le versioni fino alla 2.17.0 inclusa, tramit...

CVE-2022-47615

CVE-2022-47615 LearnPress Plugin 4.2.0 - وصف LFI غير مصادق عليه الوصف لا يقوم البرنامج المساعد بالتحقق من صحة العديد من المعاملات في نقاط نهاية REST الخاصة بـ lp/v1/courses/archive-course قبل استخدامها في include statement، مما قد يؤدي إلى مشاكل LFI. كيفية الاستخدام root@kitploit: $ python3...

By-Poloss..-..CVE-2026-39938

CVE-2026-39938: Cacti = 1.2.30 - LFI non autenticato Riepilogo esecutivo Campo| Valore ---|--- CVE ID| CVE-2026-39938 Punteggio CVSS| 9.8 Critico Prodotto interessato| Cacti Versioni interessate| = 1.2.30 Versione corretta| 1.2.31 Commit di correzione| 9871f0c Dettagli della vulnerabilità Causa...