Search Vulnerabilities

WordPress Cookiteer theme <= 1.4.8 - Local File Inclusion vulnerability

WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability

WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability

WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability

WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability

WordPress Blueprint theme < 1.1.5 - Local File Inclusion vulnerability

WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability

WordPress Accordion FAQ Plugin <= 2.2.1 - Local File Inclusion Vulnerability

WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability

FreePBX: Authenticated Local File Inclusion in Dashboard Module

A path traversal vulnerability exists in the campaign import feature of Mautic 7

WordPress SeedProd Pro plugin < 6.19.5 - Local File Inclusion vulnerability

Query Shortcode <= 0.2.1 - Authenticated (Contributor+) Local File Inclusion via 'lens' Shortcode Attribute

Identity Awareness Captive Portal - Unauthenticated Local File Inclusion

WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability

Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion

Yii 2: Local file inclusion via view parameter name collision

Advanced Database Cleaner – Premium <= 4.1.0 - Authenticated (Subscriber+) Local File Inclusion via 'template'

WordPress Plugin WP with Spritz 1.0 Remote File Inclusion

Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath