CVE-2026-66657

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

CVE-2026-66656

CVE-2026-66656 describes an unauthenticated Local File Inclusion in the WordPress Foton Core plugin, versioned = 1.1.2 is advised, but a concrete fix/version is not specified in the provided data.

CVE-2026-66656 WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66657

The CVE-2026-66657 entry describes an Unauthenticated Local File Inclusion in the WordPress Biagiotti Core plugin, versions

EUVD-2026-57895

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66656

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

CVE-2026-66653

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

EUVD-2026-57892

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

CVE-2026-66653

CVE-2026-66653 corresponds to an unauthenticated Local File Inclusion in WordPress Barista theme (versions &lt;= 2.5.1). The vulnerability affects the Barista theme’s file handling, enabling LFI with a high severity (CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). Root cause details are stated as...

CVE-2026-66653 WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Barista = 2.5.1 versions...

EUVD-2026-57872

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450 WordPress Geo Mashup plugin <= 1.13.18 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-66450

CVE-2026-66450 refers to an Unauthenticated Local File Inclusion in the WordPress plugin Geo Mashup, affected versions

EUVD-2026-57695

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document. For an HTML string or file source, the constructor collects every element in the document head through pdfwebkitmetatags and turns each one into a wkhtmltopdf command line...

PT-2026-71583

Unauthenticated Local File Inclusion in Biagiotti Core = 2.1.1 versions...

PT-2026-71582

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

PT-2026-71559

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

PT-2026-71680

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 10.1.17 Description A local file inclusion LFI issue exists in the Zimbra Classic Web Client within the Forward servlet. This is caused by improper validation of the fu request parameter, which allows an...

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...