CVE-2026-66670 WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

EUVD-2026-64810

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

CVE-2026-66670

This is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress Måne theme (versions

CVE-2026-66587

WP Cafe Pro is a WordPress plugin affected by an unauthenticated Local File Inclusion (LFI) vulnerability in versions prior to 3.0.15 . Discovered by Ananda Dhakal via Patchstack, the flaw requires no authentication or user interaction and is scored CVSS 9.8 (Critical) with full confidentiality, ...

CVE-2026-66587 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...

EUVD-2026-64806

Unauthenticated Local File Inclusion in WP Cafe Pro 3.0.15 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in the WordPress Theme Tonda (versions

CVE-2026-28152 WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28152

CVE-2026-28152 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress plugin Tonda Core , affecting versions below 2.6 . Discovered by Tran Nguyen Bao Khanh (VCI – VNPT Cyber Immunity), the flaw allows an unauthenticated remote attacker to include local files, resulting i...

EUVD-2026-64790

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

EUVD-2026-64791

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28151 WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-66671 WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

EUVD-2026-64789

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

CVE-2026-66671

An unauthenticated Local File Inclusion (LFI) vulnerability affects the WordPress plugin Verdure Core in versions

Astra Linux – Vulnerability in libxml-security-java

All versions of Apache Santuario – XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to a issue where the “secureValidation” property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to exploit an XPath Transform to extract any...

Astra Linux – Vulnerability in Pypy

In Python 2.x through 2.7.16, urllib supports the localfile scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs. This is demonstrated by triggering a urllib.urlopen'localfile:///etc/passwd' call...

Astra Linux – Vulnerability in unoconv

The unoconv package before version 0.9 mishandles untrusted pathnames, resulting in SSRF and local file inclusions...

PT-2026-80844

Unauthenticated Local File Inclusion in Verdure Core = 1.2 versions...

PT-2026-81050

Name of the Vulnerable Software and Affected Versions MagicAI for WordPress versions 1.4 and earlier Description A Local File Inclusion issue exists that allows users with Subscriber privileges to read arbitrary files on the server. Recommendations Update MagicAI for WordPress to a version later...