CVE-2026-87902-PoC-pwnVader

CVE-2026-87902 — Unauthenticated local file inclusion in WordPress core page-template resolution → RCE Author: pwnVader · License: MIT repository root | ---|--- Component| WordPress core wp-includes/template.php Type| CWE-98 — PHP file inclusion LFI → RCE Affected| WordPress 7.1.2 7.0 branch fixe...

CVE-2026-12227-visualcomposer-lfi-poc

CVE-2026-12227 - Visual Composer Unauthenticated LFI via vcv-template Validation Lab Security-research material for reproducing and validating CVE-2026-12227 : an unauthenticated local file inclusion in Visual Composer Website Builder's page-template resolution CVSS 3.1 9.8, plus a verified...

EXPLOIT-CVE-2026-87902

Lab + Exploit — CVE-2026-87902 Lab deliberately vulnerable + Python PoC for CVE-2026-87902 : unauthenticated path traversal in the page template resolution of WordPress Core , leading to Local File Inclusion LFI and conditional RCE. Field| Value ---|--- Product| WordPress Core Affected versions|...

CVE-2026-87902

CVE-2026-87902 — WordPress Core Path Traversal / LFI / RCE Unauthenticated Local File Inclusion via double-encoded path traversal in WordPress core's page-template resolver, with PEAR-based RCE chain. Vulnerability Details Field| Value ---|--- CVE| CVE-2026-87902 CVSS| 9.2 Critical —...

Fedora 44 : wordpress (2026-7f9c69a63c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7f9c69a63c advisory. WordPress 6.9.9 Security Release Security updates included in this release - Unauthenticated path traversal in page-template resolution leading to conditiona...

Fedora 45 : wordpress (2026-c7024b3255)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c7024b3255 advisory. WordPress 7.1.2 Security Release Security updates included in this release - Unauthenticated path traversal in page-template resolution leading to conditiona...

CVE-2026-71426

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute. On the public front-end, this value is...

EUVD-2026-91020

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute. On the public front-end, this value is...

CVE-2026-71426 GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute. On the public front-end, this value is...

CVE-2026-71426 GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute. On the public front-end, this value is...

CVE-2026-71426

GetSimple CMS CE versions 3.3.22 and prior are vulnerable to a directory-traversal Local File Inclusion (LFI) . An authenticated user with page-editing rights can store an arbitrary filesystem path in a page's template attribute . When a visitor requests the affected page, this value is passed un...

PT-2026-102748

An unauthenticated attacker can make get page template page-template resolution include a chosen readable local .php file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE...

WordPress 7.1.1 Path Traversal Checker

This diagnostic checker identifies whether WordPress versions 4.7.0 through 7.1.1 are exposed to an unauthenticated page-template path traversal issue and reports related compromise indicators...

WordPress Core Remote File Inclusion Vulnerability

WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local .php file outside the active theme directories, leading to remote code execution...

Exploit for CVE-2026-87902

CVE-2026-87902 - WordPress Core Unauthenticated LFI → RCE Vali...

cve-2026-87902-detection

wp-ghsa-7hp8-lab Herramientas de detección y banco de pruebas reproducible para GHSA-7hp8-65ch-5whp / CVE-2026-87902 — unauthenticated path traversal in page-template resolution leading to conditional RCE WordPress, CWE-98, CVSS 4.0: 9.2. | ---|--- check/| Controlador remoto, pasivo, sin acceso a...

WP < 7.1.2 - Unauthenticated LFI via Page Template Resolution

Description WordPress does not properly validate a request parameter used when resolving page templates in some cases, which could allow unauthenticated attackers to include an existing local PHP file from outside the theme directories, potentially leading to remote code execution depending on th...

WordPress 7.1.1 Local File Inclusion Scanner

WordPress versions 4.7.0 through 7.1.1 contain an unauthenticated page-template path traversal issue that can include readable local PHP files. This tool probes the wp-links-opml.php inclusion oracle without attempting command execution...

Exploit for CVE-2026-87902

wp-ghsa-7hp8-lab Outillage de détection et banc d'essai repro...

CVE-2026-87902

An unauthenticated attacker can make getpagetemplate page-template resolution include a chosen readable local .php file outside the active theme directories. If relevant pre-conditions for both the server and the active theme are met, this can lead to RCE...