21075 matches found
VulnCheck KEV: CVE-2026-7515
The BetterDocs Pro plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 3.8.0 via the docstyle parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code ...
WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Ossacip Thanh in WordPress Plugin MDTF versions = 1.3.8...
PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API
Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agentfile field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agentfile field in...
GHSA-P4PJ-VH7H-6CQH PraisonAI: Unauthenticated Local File Inclusion via agent_file path in PraisonAI Jobs API
Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agentfile field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agentfile field in...
DEBIAN-CVE-2026-48820
CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.2.12, and 5.3.0 through 5.3.5, View::getElementFileName does not check that the resolved element path is within the application/plugin view template paths...
EUVD-2025-210263
Unauthenticated Local File Inclusion in Granola = 1.13 versions...
EUVD-2025-210262
Unauthenticated Local File Inclusion in Gamic = 1.15 versions...
EUVD-2025-210257
Unauthenticated Local File Inclusion in Fortius = 2.3.0 versions...
EUVD-2025-210252
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
EUVD-2025-210255
Unauthenticated Local File Inclusion in Dazzle = 1.0.0 versions...
EUVD-2025-210256
Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...
EUVD-2025-210254
Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme = 1.2.2 versions...
EUVD-2026-37596
Unauthenticated Local File Inclusion in ChapterOne = 1.7 versions...
EUVD-2026-37672
Unauthenticated Local File Inclusion in Mikado Core = 1.6 versions...
EUVD-2026-37675
Unauthenticated Local File Inclusion in Malmö = 2.2 versions...
EUVD-2026-37677
Unauthenticated Local File Inclusion in Hitek 1.8.3 versions...
EUVD-2026-37591
Contributor Local File Inclusion in Element Pack Pro = 9.0.6 versions...
EUVD-2026-37649
Unauthenticated Local File Inclusion in Reprizo = 1.0.8 versions...