10 matches found
CVE-2026-37066
CVE-2026-37066 パストラバーサルにより任意ファイル読み取りが可能となる脆弱性が、/vfm-admin/index.php および /vfm-admin/ajax/streamvid.php に存在します。Veno File Manager Project 4.4.9 において、スーパー管理者権限を持つ認証済み攻撃者が、影響を受けるエンドポイントに対して特別に細工された2つのHTTPリクエスト（POSTおよびGET）を送信することで、機密情報を漏洩させる可能性があります。...
CVE-2026-25379
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/a through 6.8.6...
EUVD-2026-15696
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/a through 6.8.6...
CVE-2026-25379
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/a through 6.8.6...
CVE-2026-25379
CVE-2026-25379 is a local file inclusion vulnerability affecting the StreamVid WordPress theme (StreamVid) prior to version 6.8.6. The root cause is improper control of the filename used by PHP include/require statements, enabling an attacker to perform a PHP Local File Inclusion (LFI) via the St...
CVE-2026-25379 WordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/a through 6.8.6...
CVE-2026-25379 WordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/a through 6.8.6...
WordPress plugin StreamVid 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-27929
Name of the Vulnerable Software and Affected Versions jwsthemes StreamVid versions prior to 6.8.6 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local Fil...
