EUVD-2026-96458

Unauthenticated Local File Inclusion in DukaMarket = 1.3.0 versions...

CVE-2026-48193 WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Uminex = 1.0.9 versions...

EUVD-2026-96457

Unauthenticated Local File Inclusion in Uminex = 1.0.9 versions...

CVE-2026-48193

The WordPress Uminex theme versions

EUVD-2026-96455

Unauthenticated Local File Inclusion in Aalto = 1.8 versions...

CVE-2026-42724 WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in CleanSkin = 1.5.0 versions...

CVE-2026-42777 WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Aalto = 1.8 versions...

EUVD-2026-96454

Unauthenticated Local File Inclusion in CleanSkin = 1.5.0 versions...

CVE-2026-42777

The WordPress Aalto theme (versions

CVE-2026-42724

The WordPress CleanSkin theme (versions

CVE-2026-42704 WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Kids Care = 3.2.4 versions...

EUVD-2026-96441

Unauthenticated Local File Inclusion in Kids Care = 3.2.4 versions...

CVE-2026-42704

The Kids Care WordPress theme (versions

CVE-2026-40805 WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability

Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...

CVE-2026-40805

The PeepSo WordPress plugin (versions

EUVD-2026-96541

Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...

CVE-2026-39799 WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP File Download = 6.3.6 versions...

EUVD-2026-96532

Unauthenticated Cross Site Scripting XSS in WP File Download = 6.3.6 versions...

CVE-2026-39799

The WP File Download WordPress plugin (versions

Path-Transversal-CVE-2025-31125-

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Harsh Gupta. Usage: python viteexploit.py -u http://target.com python viteexploit.py -f...