CVE-2026-13170

The CVE-2026-13170 entry concerns the Eventin WordPress plugin, affected until version 4.1.20. The vulnerability stems from improper validation of the template path setting prior to including a local file, enabling users with editor-level access and above to include and execute arbitrary local PH...