#cwe-98

共收录 155 条相关情报。

← 返回所有主题
漏洞预警2026-09-18 发布INFO

The All Bootstrap Blocks WordPress plugin through 1.3.31 does not validate a block attribute before using it to build a filesystem path that is included at render time, allowing...

CVE-2026-88994

The All Bootstrap Blocks WordPress plugin through 1.3.31 does not validate a block attribute before using it to build a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_parameters endpoint using a valid operator cookie allowing exe...

CVE-2026-27556

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/save_iodd_param

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-16 发布INFO

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_info endpoint using a valid user cookie allowing execution...

CVE-2026-27555

A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_iodd_port_i

历史摘要 · 未重新核验 · NVD

安全公告2026-09-09 发布INFO

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for...

CVE-2026-15406

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to L

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-09-09 发布INFO

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for...

CVE-2026-15667

The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to L

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-09-04 发布INFO

The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. T...

CVE-2026-11613

The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This makes it possible for unauthenticated attackers to include ...

CVE-2026-78566

The Shuffle theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8. This ma

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to in...

CVE-2026-78562

The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and...

CVE-2026-78478

The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the em_o...

CVE-2026-14280

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion i

历史摘要 · 未重新核验 · NVD

安全公告2026-08-25 发布INFO

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice...

CVE-2026-32560

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versio

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-24 发布INFO

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions.

CVE-2026-32560

Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.

CVE-2026-66671

Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Unauthenticated Local File Inclusion in Måne <= 1.7 versions.

CVE-2026-66670

Unauthenticated Local File Inclusion in Måne <= 1.7 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

CVE-2026-66587

Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.

CVE-2026-28152

Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

CVE-2026-28151

Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

CVE-2026-66586

Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions.

CVE-2026-28150

Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

Unauthenticated Local File Inclusion in Shuffle <= 1.8 versions.

CVE-2025-15637

Unauthenticated Local File Inclusion in Shuffle <= 1.8 versions.

历史摘要 · 未重新核验 · NVD