4081 matches found
CVE-2025-11920
The WPCOM Member plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.14 via the action parameter in one of its shortcodes. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary...
CVE-2025-11920
The WPCOM Member plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.14 via the action parameter in one of its shortcodes. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary...
PT-2025-42787
Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.2 147 Description ClipBucket v5 is an open source video sharing platform susceptible to arbitrary PHP code execution. The type parameter within a POST request to the /upload/admin area/actions/update launch.php...
CVE-2025-62429: Improper Control of Generation of Code
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/adminarea/actions/updatelaunch.php, the "type" parameter from a POST request is embedded into PHP tags and executed. Proper sanitization is n...
PT-2025-43352
Name of the Vulnerable Software and Affected Versions Houzez Theme - Functionality versions prior to 4.1.9 Description The Houzez Theme - Functionality plugin for WordPress contains a Local File Inclusion issue. This allows authenticated attackers with contributor-level access or higher to includ...
EUVD-2025-34556
The Woocommerce Category and Products Accordion Panel plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0 via the 'categoryaccordionpanel' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2025-11746
CVE-2025-11746 is an authenticated Local File Inclusion vulnerability affecting the WordPress XStore/Multi-purpose WooCommerce Theme (versions <= 9.5.4). Exploitation via theet_ajax_required_plugins_popup() enables an attacker with Subscriber+ privileges to include and execute arbitrary PHP co...
WordPress plugin XStore has a path traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...
CVE-2025-7634
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mode parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on th...
CVE-2025-7634 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mode parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on th...
EUVD-2006-2607
Malware in sbrugna...
EUVD-2007-2474
Malware in sbrugna...
EUVD-2002-0203
Malware in sbrugna...
EUVD-2007-1992
Malware in sbrugna...
EUVD-2009-4189
Malware in sbrugna...
EUVD-2007-2077
Malware in sbrugna...
EUVD-2007-3389
Malware in sbrugna...
EUVD-2007-5392
Malware in sbrugna...