Lucene search
+L

42694 matches found

NVD
NVD
added 6 hours ago2 views

CVE-2026-66586

Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...

6.6CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago9 views

CVE-2026-28150

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

8.1CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago3 views

CVE-2025-15637

Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...

8.1CVSS
SaveExploits0References1
CVE
CVE
added 6 hours ago15 views

CVE-2026-66586

WordPress WP Cafe Pro plugin (versions below 3.0.15) has a Local File Inclusion vulnerability, discovered by Ananda Dhakal of Patchstack. An authenticated author with high privileges can exploit it over the network to read sensitive server files, potentially compromising confidentiality, integrit...

6.6CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago3 views

EUVD-2026-63333

Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...

6.6CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 6 hours ago7 views

CVE-2026-66586 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

Author Local File Inclusion in WP Cafe Pro 3.0.15 versions...

6.6CVSS
SaveExploits0References1
Cvelist
Cvelist
added 6 hours ago8 views

CVE-2026-28150 WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

8.1CVSS
SaveExploits0References1
CVE
CVE
added 6 hours ago5 views

CVE-2026-28150

The Golo Framework WordPress plugin (versions before 1.7.5) contains an unauthenticated Local File Inclusion vulnerability. CVSS 3.1 scores it HIGH (8.1) with network attack vector, no privileges or user interaction required. Affected sites should upgrade to version 1.7.5 immediately. No in-the-w...

8.1CVSS5.3AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago4 views

EUVD-2026-63329

Unauthenticated Local File Inclusion in Golo Framework 1.7.5 versions...

8.1CVSS5.2AI score
SaveExploits0References1
CVE
CVE
added 6 hours ago5 views

CVE-2025-15637

Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...

8.1CVSS5.3AI score
SaveExploits0References1
Cvelist
Cvelist
added 6 hours ago8 views

CVE-2025-15637 WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...

8.1CVSS
SaveExploits0References1
EUVD
EUVD
added 6 hours ago5 views

EUVD-2025-210754

Unauthenticated Local File Inclusion in Shuffle = 1.8 versions...

8.1CVSS5.2AI score
SaveExploits0References1
NVD
NVD
added 12 hours ago7 views

CVE-2026-75963

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...

7.5CVSS
SaveExploits0References5
EUVD
EUVD
added 13 hours ago8 views

EUVD-2026-63199

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...

7.5CVSS6.4AI score
SaveExploits0References5
Cvelist
Cvelist
added 13 hours ago10 views

CVE-2026-75963 Events Made Easy <= 3.2.5 - Authenticated (Contributor+) Local File Inclusion via 'wp_page_template' Event Property

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...

7.5CVSS
SaveExploits0References5
CVE
CVE
added 13 hours ago15 views

CVE-2026-75963

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the emesingleeventpagetemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary .p...

7.5CVSS6.4AI score
SaveExploits0References5
Nuclei
Nuclei
added 14 hours ago107 views

LimeSurvey 4.1.11 - Local File Inclusion

LimeSurvey before 4.1.12+200324 is vulnerable to local file inclusion because it contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. id: CVE-2020-11455 info: name: LimeSurvey 4.1.11 - Local File Inclusion author: daffainfo severity: critical...

9.8CVSS8.5AI score0.97179EPSS
SaveExploits6References5
Nuclei
Nuclei
added 14 hours ago11 views

Flowise - Path Traversal

Flowise = 2.2.8 contains a path traversal vulnerability caused by missing validation of chatflowId and chatId parameters in file handling, letting unauthenticated attackers read and write arbitrary files, exploit requires no authentication. id: CVE-2025-71334 info: name: Flowise - Path Traversal...

9.8CVSS5.4AI score0.03903EPSS
SaveExploits1References2
Nuclei
Nuclei
added 14 hours ago56 views

rConfig 3.9.6 - Local File Inclusion

rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server. id: CVE-2021-29006 info: name: rConfig 3.9.6 - Local File Inclusion author: r3Y3r53 severity: medium description: | rConfig 3.9.6 is affected by a Local File...

6.5CVSS6.4AI score0.05557EPSS
SaveExploits1References3
Nuclei
Nuclei
added 14 hours ago100 views

Ray API - Local File Inclusion

LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. id: CVE-2023-6021 info: name: Ray API - Local File Inclusion author: byt3bl33d3r severity: high description: | LFI in Ray's log API endpoint allows attackers to read any file on the server withou...

7.5CVSS7.9AI score0.36825EPSS
SaveExploits11References2
Rows per page
Query Builder