Total
1353 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-22325 | 2026-10-26 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions. | |||||
| CVE-2026-22331 | 2026-10-26 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions. | |||||
| CVE-2026-34895 | 2026-10-26 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions. | |||||
| CVE-2026-39558 | 2026-10-26 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Malmö <= 2.2 versions. | |||||
| CVE-2026-40731 | 2026-10-26 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions. | |||||
| CVE-2026-49954 | 2026-10-25 | N/A | 7.2 HIGH | ||
| Discuz! X5.0 releases 20260320 through 20260610 contain a local file inclusion vulnerability that allows authenticated administrators to execute arbitrary code by importing a specially crafted plugin configuration containing path traversal sequences in the directory attribute. Attackers can trigger an exception during plugin installation to bypass sanitization routines, causing malicious paths to be stored unsanitized and subsequently passed to include(), which combined with file upload functionality escalates to arbitrary code execution in the context of the web server user. | |||||
| CVE-2026-54845 | 2026-10-25 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions. | |||||
| CVE-2026-42382 | 2026-10-25 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Audrey <= 1.5 versions. | |||||
| CVE-2026-27412 | 2026-10-25 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Pearl - Corporate Business <= 3.4.10 versions. | |||||
| CVE-2026-57749 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions. | |||||
| CVE-2026-57748 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Contributor Local File Inclusion in Shopify <= 1.0.0 versions. | |||||
| CVE-2026-57647 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versions. | |||||
| CVE-2026-57789 | 2026-10-24 | N/A | 7.5 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through <= 5.1.2. | |||||
| CVE-2026-57802 | 2026-10-24 | N/A | 7.5 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur allows PHP Local File Inclusion. This issue affects Struktur: from n/a before 2.7. | |||||
| CVE-2026-57804 | 2026-10-24 | N/A | 7.5 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PHP Local File Inclusion. This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1. | |||||
| CVE-2026-57798 | 2026-10-24 | N/A | 7.5 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SaurabhSharma NewsPlus Shortcodes newsplus-shortcodes allows PHP Local File Inclusion.This issue affects NewsPlus Shortcodes: from n/a through <= 4.2.0. | |||||
| CVE-2026-15540 | 2026-10-24 | 4.0 MEDIUM | 4.3 MEDIUM | ||
| A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrative Interface. Performing a manipulation of the argument page results in improper control of filename for include/require statement in php program. It is possible to initiate the attack remotely. The exploit is now public and may be used. | |||||
| CVE-2026-57795 | 2026-10-24 | N/A | 7.5 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor allows PHP Local File Inclusion.This issue affects Kitchor: from n/a through <= 1.4.3. | |||||
| CVE-2026-57790 | 2026-10-24 | N/A | 7.5 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allows PHP Local File Inclusion.This issue affects Billey: from n/a through <= 2.1.8. | |||||
| CVE-2026-57794 | 2026-10-24 | N/A | 7.5 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framework: from n/a through <= 1.7.3. | |||||