phpcms-2008-CVE-2018-19127

phpcms-2008-CVE-2018-19127 Недавно мы обнаружили уязвимость в /type.php исходного кода phpcms 2008. Когда злоумышленники отправляют специально сформированные запросы вида "/type.php?template=tag;@unlinkFILE;assert$POST1;//../rss", вредоносное содержимое в данном случае "@unlinkFILE;assert$POST1;"...

CVE-2021-44967

CVE-2021-44967 - аутентифицированное привилегированное удалённое выполнение кода RCE Аутентифицированное привилегированное удалённое выполнение команд в LimeSurvey версии 5.2.4 через загрузку и установку плагинов позволяет удалённому пользователю загружать произвольный PHP-код. Использование...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Vvveb-CMS-CVE-2025-8518

Vvveb-CMS-CVE-2025-8518 Этот репозиторий содержит концепт-эксплойт PoC, демонстрирующий критическую уязвимость в givanz Vvveb 1.0.5. Уязвимость позволяет аутентифицированному пользователю с правами редактирования шаблонов записывать произвольный PHP-код в файлы на сервере, что приводит к удалённо...

Python-exploit-CVE-2020-25213

Description Le plugin File Manager wp-file-manager avant la version 6.9 pour WordPress permet à des attaquants distants de télécharger et d'exécuter du code PHP arbitraire car il renomme un fichier de connecteur elFinder d'exemple non sécurisé avec l'extension .php. Cela permet par exemple aux...

CVE-2026-13405

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before writing it to a file that is later executed, allowing users with the manageoptions capability and, on WordPress Multisite, non-super subsite administrators who do not otherwise...

EUVD-2026-63199

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...

CVE-2026-75963

The Events Made Easy WordPress plugin (all versions up to and including 3.2.5 ) is vulnerable to Local File Inclusion via the eme_single_event_page_template function, specifically through the wp_page_template event property. Authenticated attackers with contributor-level access or above can injec...

CVE-2026-17533

The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installations, allowing an administrator of a single subsite to execute arbitrary PHP code across the entire network...

CVE-2026-17533

In All-in-One WP Migration and Backup plugin before 7.108, the REST-based migration import endpoint lacks network-admin capability checks on multisite installs. A subsite admin can POST a malicious archive containing PHP payloads, which the plugin extracts and executes across all subsites, achiev...

CVE-2026-6020

The ShopLentor plugin for WordPress is affected by an authentication-restricted arbitrary function execution vulnerability. All versions up to 3.3.7 expose the woolentoropt/v1/custom-action REST endpoint; the handle_action() method passes user-supplied input directly to call_user_func() without a...

CVE-2026-6020 ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API

The ShopLentor plugin for WordPress is vulnerable to arbitrary function execution via the woolentoropt/v1/custom-action REST API endpoint in all versions up to, and including, 3.3.7. This is due to the handleaction method passing user-supplied input directly to calluserfunc without an allowlist o...

CVE-2026-16250 Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload

The Personal QR Message WordPress plugin through 1.0 does not restrict the file types that can be uploaded through an unauthenticated handler, allowing unauthenticated users to upload arbitrary executable PHP files that are directly reachable, leading to remote code execution...

CVE-2026-17605

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56 via the getpaidpaymentformelement function. This makes it possible for authenticated attackers, with administrator-level acces...

CVE-2026-13392

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with administrative capabilities from being written verbatim into a generated PHP file that the ElementsKit Elementor Addons WordPress plugin before 3.10.01 subsequently...

CVE-2026-46640

CVE-2026-46640 — Twig (PHP template engine) : The issue affects Twig 3.15.0 through 3.26.0 where _self.() and import-alias dynamic attribute syntax can concatenate attacker-controlled strings into a MacroReferenceExpression name, bypassing identifier validation and causing raw PHP to be emitted a...

CVE-2026-43921 FOSSBilling vulnerable to arbitrary PHP code injection via unescaped config serialization

FOSSBilling is a free, open-source billing and client management system. Versions 0.6.10 through 0.7.2 have a PHP code injection vulnerability in FOSSBilling's Config::prettyPrintArrayToPHP method. When configuration values are updated, string values are written into config.php without escaping...

CVE-2026-12194

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations...

CVE-2026-12194 PHPIPAM Authenticated LFI

PHPIPAM is affected by an authenticated local file inclusion vulnerability that allows users with access to the API to execute/include arbitrary PHP files on the web server's file system. The API is not enabled by default on installations...

CVE-2026-12194

PHPIPAM is affected by an authenticated local file inclusion vulnerability that can allow API-authenticated users to include arbitrary PHP files on the server filesystem. The API is not enabled by default on installations. The CVSS metrics indicate a low-severity issue with network access, low ef...