446 matches found
CVE-2025-11746 XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion
The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theetajaxrequiredpluginspopup function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php files on t...
CVE-2025-7634
The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.6.7 via the mode parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on th...
PT-2025-41358
Name of the Vulnerable Software and Affected Versions WP Travel Engine – Tour Booking Plugin – Tour Operator Software versions prior to 6.6.8 Description The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is susceptible to a Local File Inclusion issue in...
EUVD-2018-10929
Malware in sbrugna...
EUVD-2019-14674
Malware in sbrugna...
EUVD-2005-4026
Malware in sbrugna...
EUVD-2020-1494
Malware in sbrugna...
EUVD-2014-9817
Malware in sbrugna...
EUVD-2008-6915
Malware in sbrugna...
EUVD-2006-5122
Malware in sbrugna...
EUVD-2020-21090
Malware in sbrugna...
EUVD-2017-1560
Malware in sbrugna...
EUVD-2020-3793
Malware in sbrugna...
EUVD-2018-1902
Malware in sbrugna...
EUVD-2006-0191
Malware in sbrugna...
EUVD-2021-1058
Malware in sbrugna...
EUVD-2007-5467
Malware in sbrugna...
EUVD-2020-1452
Malware in sbrugna...