tag
Local-File-Inclusion
Critical
Kubio AI Page Builder <= 2.5.1 Unauthenticated Local File Inclusion (CVE-2025-2294)
CVE-2025-2294·
Kubio AI Page Builder (WordPress plugin)
unpatched
Critical
Veno File Manager 4.4.9 — Unauthenticated LFI to Superadmin Takeover (CVE-2026-37072)
CVE-2026-37072·
Veno File Manager Project
unpatched
High
Prodigy Commerce WordPress Plugin — Unauthenticated Local File Inclusion (CVE-2026-0926)
CVE-2026-0926·
Prodigy Commerce (WordPress plugin)
unpatched
Medium
Dolibarr selectobject.php Authenticated Local File Inclusion (CVE-2026-34036)
CVE-2026-34036·
Dolibarr ERP/CRM
unpatched