Lucene search
+L

11204 matches found

CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•17 views

WordPress plugin Optimize has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS5.7AI score0.00477EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•13 views

WordPress plugin Mitech has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS5.8AI score0.00574EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•15 views

WordPress plugin Typify has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS5.8AI score0.00574EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•15 views

WordPress plugin Moody has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS5.8AI score0.00574EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•14 views

WordPress plugin Atlas has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS5.8AI score0.00574EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•20 views

WordPress plugin Neo Ocular has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

8.1CVSS5.9AI score0.00484EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•15 views

GreenShot security vulnerabilities

GreenShot is a lightweight screenshot software tool for Windows from GreenShot. A security vulnerability exists in GreenShot 1.3.310 and earlier versions, which stems from improper filename handling and can lead to OS command injection...

7.7CVSS6AI score0.01032EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•22 views

PT-2026-1784

Name of the Vulnerable Software and Affected Versions TMRW-studio Atlas versions through 2.1.0 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. Recommendation...

9.8CVSS6.7AI score0.00574EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•12 views

PT-2026-1696

Name of the Vulnerable Software and Affected Versions magentech Rozy - Flower Shop versions through 1.2.25 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion ...

9.8CVSS6.5AI score0.00574EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•4 views

CVE-2025-67920: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Neo Ocular neoocular allows PHP Local File Inclusion.This issue affects Neo Ocular: from n/a through 1.2...

9.8CVSS5.8AI score0.00484EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•17 views

PT-2026-1787

Name of the Vulnerable Software and Affected Versions QantumThemes Typify versions through 3.0.2 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. The vulnerability exists in QantumThemes...

9.8CVSS6.7AI score0.00574EPSS
SaveExploits0References3
NVD
NVD
•added 2026/01/07 12:17 p.m.•12 views

CVE-2025-69081

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Hope charity-is-hope allows PHP Local File Inclusion.This issue affects Hope: from n/a through = 3.0.0...

8.1CVSS0.00484EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/07 11:59 a.m.•17 views

CVE-2025-69080 WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through = 1.9.8...

8.1CVSS5.9AI score0.00484EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/01/07 11:59 a.m.•56 views

CVE-2025-69080 WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through = 1.9.8...

8.1CVSS0.00484EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/07 11:56 a.m.•35 views

CVE-2025-69081

CVE-2025-69081 describes an Improper Control of Filename for Include/Require in PHP (PHP Local File Inclusion) affecting ThemeREX Group Hope charity-is-hope WordPress theme (Hope: from n/a through 3.0.0). Affected component is the PHP include/require path handling in the theme. The Red Hat entry ...

8.1CVSS5.8AI score0.00484EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/07 11:56 a.m.•5 views

CVE-2025-69081 WordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Hope charity-is-hope allows PHP Local File Inclusion.This issue affects Hope: from n/a through = 3.0.0...

8.1CVSS5.8AI score0.00484EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:48 a.m.•20 views

CVE-2022-27982

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution RCE vulnerability via the fileName parameter at /guestauth/cfg/upLoadCfg.php...

9.8CVSS8.5AI score0.02132EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:43 a.m.•16 views

CVE-2026-21439

badkeys is a tool and library for checking cryptographic public keys for known vulnerabilities. In versions 0.0.15 and below, an attacker may inject content with ASCII control characters like vertical tabs, ANSI escape sequences, etc., that can create misleading output of the badkeys command-line...

5.1CVSS5.9AI score0.00331EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:31 a.m.•17 views

CVE-2019-16123

In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure...

7.5CVSS7.2AI score0.16619EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•19 views

PT-2026-1646

Name of the Vulnerable Software and Affected Versions Hope versions through 3.0.0 Description The software contains an Improper Control of Filename for Include/Require Statement issue, specifically a PHP Local File Inclusion. The vulnerable component allows for the inclusion of local files...

8.1CVSS6.5AI score0.00484EPSS
SaveExploits0References4
Rows per page
Query Builder