#cwe-98

共收录 155 条相关情报。

漏洞预警2026-08-20 发布INFO

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the eme_single_event_page_template function. This...

CVE-2026-75963

The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-19 发布INFO

Unauthenticated Local File Inclusion in Resido <= 1.5 versions.

CVE-2026-73387

Unauthenticated Local File Inclusion in Resido <= 1.5 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-18 发布INFO

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions.

CVE-2026-73400

Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-18 发布INFO

Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.

CVE-2026-32464

Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-18 发布INFO

Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.

CVE-2026-28570

Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-13 发布INFO

Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.

CVE-2026-66657

Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-13 发布INFO

Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.

CVE-2026-66656

Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-13 发布INFO

Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.

CVE-2026-66653

Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-13 发布INFO

Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.

CVE-2026-66450

Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-08-06 发布INFO

Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions.

CVE-2026-66710

Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions.

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

安全公告2026-08-01 发布INFO

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is...

CVE-2026-17605

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Incl

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-98 #severity:medium

漏洞预警2026-08-01 发布INFO

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56 via th...

CVE-2026-17605

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Incl

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

安全公告2026-08-01 发布INFO

Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.56 - Authenticated (Administrator+) Local File Inclusion via Payment Form 'type' Element Field

CVE-2026-17605

The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Incl

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-98

漏洞预警2026-07-28 发布INFO

Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files ...

CVE-2026-63302

Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parameter. An authenticated at

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-16 发布INFO

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correctly validate the provided user ID, resulting in a path tra...

CVE-2026-44177

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correct

历史摘要 · 未重新核验 · NVD

#cve #cwe-22 #cwe-98

安全公告2026-07-16 发布INFO

Kirby: Pre-authentication path traversal and PHP file inclusion during user lookup

CVE-2026-44177

Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, Kirby did not correct

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-98

漏洞预警2026-07-16 发布INFO

Emlog is an open source website building system. In 2.6.13 and earlier, the article publishing interface stores a path-traversal template parameter from api_controller.php witho...

CVE-2026-46687

Emlog is an open source website building system. In 2.6.13 and earlier, the article publishing interface stores a path-t

历史摘要 · 未重新核验 · NVD

#cve #cwe-24 #cwe-98

安全公告2026-07-16 发布INFO

Emlog Local File Inclusion (LFI)

CVE-2026-46687

Emlog is an open source website building system. In 2.6.13 and earlier, the article publishing interface stores a path-t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-24 #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusio...

CVE-2026-57805

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98

漏洞预警2026-07-13 发布INFO

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem...

CVE-2026-57804

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

历史摘要 · 未重新核验 · NVD

#cve #cwe-98