CVE-2026-62022

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

EUVD-2026-96461

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

CVE-2026-62022

The Tonda Membership WordPress plugin versions

CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

CVE-2026-62022: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28152

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

EUVD-2026-64791

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

EUVD-2026-64790

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28152 WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28152 WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

CVE-2026-28152

CVE-2026-28152 is an unauthenticated Local File Inclusion (LFI) vulnerability in the WordPress plugin Tonda Core , affecting versions below 2.6 . Discovered by Tran Nguyen Bao Khanh (VCI – VNPT Cyber Immunity), the flaw allows an unauthenticated remote attacker to include local files, resulting i...

CVE-2026-28151 WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28151 WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28151

Unauthenticated Local File Inclusion in the WordPress Theme Tonda (versions

CVE-2026-28151: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

PT-2026-80824

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

PT-2026-80823

Unauthenticated Local File Inclusion in Tonda 2.6 versions...

CVE-2026-28152: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Tonda Core 2.6 versions...

WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Tonda Core versions 2.6...