CVE-2026-32464

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32464 WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32464

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32464 WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32464

The WordPress plugin Theme Test Drive (versions ≤ 2.9.1) is affected by an unauthenticated Local File Inclusion vulnerability discovered by Steven Julian, allowing remote attackers to read arbitrary server files without authentication (CVSS 8.1 HIGH). Patchstack reports the flaw but no patch vers...

EUVD-2026-60900

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

CVE-2026-32464: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Theme Test Drive = 2.9.1 versions...

WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Steven Julian in WordPress Plugin Theme Test Drive versions = 2.9.1...

PT-2026-77042

Name of the Vulnerable Software and Affected Versions Theme Test Drive versions prior to 2.9.2 Description Unauthenticated attackers can perform Local File Inclusion, a flaw that allows the inclusion and execution of arbitrary files on the server. This can lead to the execution of PHP code,...

CVE-2025-58884: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ivan Drago vipdrv vipdrv-vip-test-drive allows Stored XSS.This issue affects vipdrv: from n/a through = 1.0.3...

VehicleWorkshop 1.0 - (bookingid) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: VehicleWorkshop 1.0 - 'bookingid' SQL Injection Exploit Author: Mehran Feizi Vendor HomagePage: https://github.com/spiritson/VehicleWorkshop Tested on: Windows Google Dork: N/A ========= Vulnerable Page: =========...

VehicleWorkshop 1.0 - 'bookingid' SQL Injection

Exploit Title: VehicleWorkshop 1.0 - 'bookingid' SQL Injection Data: 2020-02-06 Exploit Author: Mehran Feizi Vendor HomagePage: https://github.com/spiritson/VehicleWorkshop Tested on: Windows Google Dork: N/A ========= Vulnerable Page: ========= /viewtestdrive.php ========== Vulnerable Source:...

haltonhonda.com XSS vulnerability

Vulnerable URL: http://www.haltonhonda.com/new/book-a-test-drive/?vehicleid=8293418"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY // Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerabili...

toyota.ca XSS vulnerability

Vulnerable URL: https://www.toyota.ca/toyota/en/request-test-drive?series=t86"alert/OPENBUGBOUNTY/...

WordPress Theme Test Drive Plugin <= 2.9 - Multiple Vulnerabilities

This plugin is prone to an authenticated file upload and cross site scripting vulnerabilities. Solution Update the plugin...

Theme Test Drive <= 2.9 - Authenticated File Upload & XSS

The Theme Test Drive WordPress plugin was affected by an Authenticated File Upload & XSS security vulnerability...