CVE-2026-28152

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28152 WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in the WordPress Theme Tonda (versions

EUVD-2026-64791

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28152

CVE-2026-28152 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress plugin Tonda Core , affecting versions below 2.6 . Discovered by Tran Nguyen Bao Khanh (VCI – VNPT Cyber Immunity), the flaw allows an unauthenticated remote attacker to include local files, resulting i...

EUVD-2026-64790

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28151 WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Tonda Core versions 2.6...

WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Tonda versions 2.6...

EUVD-2026-48088

Contributor Local File Inclusion in Tonda Core = 2.1.2 versions...

CVE-2026-65477

CVE-2026-65477 affects the WordPress Tonda Core plugin, version ≤ 2.1.2, with a Local File Inclusion vulnerability. Root cause: LFI in Tonda Core ≤ 2.1.2. Impact includes high confidentiality, integrity, and availability risk (CVSS 3.1: 7.5, AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation stat...

CVE-2026-57805

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.This issue affects Tonda: from n/a through = 2.5...

CVE-2026-57805

CVE-2026-57805 impact: WordPress theme Tonda (Select-Themes)

CVE-2026-57805 WordPress Tonda theme <= 2.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.This issue affects Tonda: from n/a through = 2.5...

WordPress Tonda theme <= 2.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Tonda versions = 2.5...