Local-File-Inclusion — PoC Archivehttps://poc.intelseclab.com/tags/local-file-inclusion/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Kubio AI Page Builder <= 2.5.1 Unauthenticated Local File Inclusion (CVE-2025-2294)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-2294-kubio-lfi/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-2294-kubio-lfi/Critical severity (CVSS 9.8) — web · CVE-2025-2294. Status: PoC. Affects: Kubio AI Page Builder (WordPress plugin). Tags: wordpress, kubio, page-builder, lfi, local-file-inclusion, unauthenticated, php, python, cwe-98.webCriticalwordpresskubiopage-builderlfilocal-file-inclusionunauthenticatedphppythoncwe-98Veno File Manager 4.4.9 — Unauthenticated LFI to Superadmin Takeover (CVE-2026-37072)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37072-veno-file-manager-superadmin-takeover/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-37072-veno-file-manager-superadmin-takeover/Critical severity — web · CVE-2026-37072. Status: PoC. Affects: Veno File Manager Project. Tags: file-manager, unauthenticated, local-file-inclusion, account-takeover, php, veno-file-manager.webCriticalfile-managerunauthenticatedlocal-file-inclusionaccount-takeoverphpveno-file-managerProdigy Commerce WordPress Plugin — Unauthenticated Local File Inclusion (CVE-2026-0926)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0926-prodigy-commerce-lfi/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-0926-prodigy-commerce-lfi/High severity — web · CVE-2026-0926. Status: PoC. Affects: Prodigy Commerce (WordPress plugin). Tags: wordpress, plugin, prodigy-commerce, lfi, local-file-inclusion, unauthenticated, ajax.webHighwordpresspluginprodigy-commercelfilocal-file-inclusionunauthenticatedajaxDolibarr selectobject.php Authenticated Local File Inclusion (CVE-2026-34036)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34036-dolibarr-selectobject-lfi/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-34036-dolibarr-selectobject-lfi/Medium severity — web · CVE-2026-34036. Status: PoC. Affects: Dolibarr ERP/CRM. Tags: dolibarr, lfi, local-file-inclusion, authenticated, crm, ajax, php.webMediumdolibarrlfilocal-file-inclusionauthenticatedcrmajaxphp