agentprime: File inclusionEvery new File inclusion Advisory and CVE.https://agentprime.io/CVE-2026-71550: SuiteCRM: LFI to RCE via AOW_WorkFlowhttps://agentprime.io/advisories/CVE-2026-71550/https://agentprime.io/advisories/CVE-2026-71550/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:36:47 GMTCVEcriticalCVE-2026-73695: Control Web Panel (CWP) < 1.16 Path Traversal via services/users/index.phphttps://agentprime.io/advisories/CVE-2026-73695/https://agentprime.io/advisories/CVE-2026-73695/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:51:47 GMTCVECVE-2026-62121: WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.26 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62121/https://agentprime.io/advisories/CVE-2026-62121/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 18:06:19 GMTCVECVE-2010-20125: DedeCMS < 5.7 File Inclusion via plus/carbuyaction.phphttps://agentprime.io/advisories/CVE-2010-20125/https://agentprime.io/advisories/CVE-2010-20125/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:23:34 GMTCVECVE-2026-110185: Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More <= 1.31.0 - Unauthenticated Local File Inclusion via 'webhook' and 'body' Parametershttps://agentprime.io/advisories/CVE-2026-110185/https://agentprime.io/advisories/CVE-2026-110185/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:45:20 GMTCVECVE-2014-125137: C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.phphttps://agentprime.io/advisories/CVE-2014-125137/https://agentprime.io/advisories/CVE-2014-125137/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 02:03:13 GMTCVECVE-2026-112850: WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-112850/https://agentprime.io/advisories/CVE-2026-112850/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 13:00:19 GMTCVECVE-2026-112832: WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-112832/https://agentprime.io/advisories/CVE-2026-112832/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 11:00:11 GMTCVEcriticalCVE-2017-20289: Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameterhttps://agentprime.io/advisories/CVE-2017-20289/https://agentprime.io/advisories/CVE-2017-20289/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 10:57:23 GMTCVECVE-2026-112820: WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-112820/https://agentprime.io/advisories/CVE-2026-112820/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 10:00:12 GMTCVECVE-2016-20101: Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.phphttps://agentprime.io/advisories/CVE-2016-20101/https://agentprime.io/advisories/CVE-2016-20101/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 20:31:27 GMTCVEcriticalCVE-2026-113402: ArmorX Global Technology｜ArmorX Spam - Local File Inclusionhttps://agentprime.io/advisories/CVE-2026-113402/https://agentprime.io/advisories/CVE-2026-113402/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 06:28:45 GMTCVECVE-2026-111829: WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-111829/https://agentprime.io/advisories/CVE-2026-111829/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:27:57 GMTCVEYOURLS: Unauthenticated File Inclusionhttps://agentprime.io/advisories/GHSA-f8ff-652m-j5rx/https://agentprime.io/advisories/GHSA-f8ff-652m-j5rx/yourls/yourls <1.10.5, fixed in 1.10.5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 15 Oct 2026 20:13:02 GMTPackagistyourls/yourlsCVE-2026-104909: Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameterhttps://agentprime.io/advisories/CVE-2026-104909/https://agentprime.io/advisories/CVE-2026-104909/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:36 GMTCVECVE-2026-110284: LifterLMS <= 10.3.1 - Authenticated (Contributor+) Local File Inclusion via 'lifterlms_checkout' Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-110284/https://agentprime.io/advisories/CVE-2026-110284/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:33 GMTCVECVE-2026-103367: ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameterhttps://agentprime.io/advisories/CVE-2026-103367/https://agentprime.io/advisories/CVE-2026-103367/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:32 GMTCVECVE-2026-104995: BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Valuehttps://agentprime.io/advisories/CVE-2026-104995/https://agentprime.io/advisories/CVE-2026-104995/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 01:27:15 GMTCVECVE-2026-66566: WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-66566/https://agentprime.io/advisories/CVE-2026-66566/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:36:12 GMTCVECVE-2026-62115: WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62115/https://agentprime.io/advisories/CVE-2026-62115/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:58 GMTCVECVE-2026-62099: WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62099/https://agentprime.io/advisories/CVE-2026-62099/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:57 GMTCVECVE-2026-62096: WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62096/https://agentprime.io/advisories/CVE-2026-62096/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:55 GMTCVECVE-2026-62094: WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62094/https://agentprime.io/advisories/CVE-2026-62094/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:54 GMTCVECVE-2026-62092: WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62092/https://agentprime.io/advisories/CVE-2026-62092/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:52 GMTCVECVE-2026-62075: WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62075/https://agentprime.io/advisories/CVE-2026-62075/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:47 GMTCVECVE-2026-62074: WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62074/https://agentprime.io/advisories/CVE-2026-62074/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:46 GMTCVECVE-2026-62070: WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62070/https://agentprime.io/advisories/CVE-2026-62070/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:45 GMTCVECVE-2026-62069: WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62069/https://agentprime.io/advisories/CVE-2026-62069/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:44 GMTCVECVE-2026-62068: WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62068/https://agentprime.io/advisories/CVE-2026-62068/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:44 GMTCVECVE-2026-62067: WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62067/https://agentprime.io/advisories/CVE-2026-62067/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:43 GMTCVECVE-2026-62066: WordPress Volos theme <= 1.2 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62066/https://agentprime.io/advisories/CVE-2026-62066/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:42 GMTCVECVE-2026-62065: WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62065/https://agentprime.io/advisories/CVE-2026-62065/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:41 GMTCVECVE-2026-62032: WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62032/https://agentprime.io/advisories/CVE-2026-62032/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:31 GMTCVEcriticalCVE-2026-62020: WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-62020/https://agentprime.io/advisories/CVE-2026-62020/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:25 GMTCVECVE-2026-48194: WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-48194/https://agentprime.io/advisories/CVE-2026-48194/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:24 GMTCVECVE-2026-48193: WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-48193/https://agentprime.io/advisories/CVE-2026-48193/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:23 GMTCVECVE-2026-42777: WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42777/https://agentprime.io/advisories/CVE-2026-42777/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:21 GMTCVECVE-2026-42724: WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42724/https://agentprime.io/advisories/CVE-2026-42724/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:21 GMTCVECVE-2026-42704: WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42704/https://agentprime.io/advisories/CVE-2026-42704/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 19:35:11 GMTCVECVE-2026-104899: GeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' Parameterhttps://agentprime.io/advisories/CVE-2026-104899/https://agentprime.io/advisories/CVE-2026-104899/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:31:02 GMTCVECVE-2026-94067: WordPress The Voux theme <= 6.9.5 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-94067/https://agentprime.io/advisories/CVE-2026-94067/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 14:00:10 GMTCVECVE-2026-94062: WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2026-94062/https://agentprime.io/advisories/CVE-2026-94062/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 13:00:16 GMTCVECVE-2026-75028: WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Settinghttps://agentprime.io/advisories/CVE-2026-75028/https://agentprime.io/advisories/CVE-2026-75028/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 03 Oct 2026 06:38:22 GMTCVECVE-2026-92174: SiteOrigin Widgets Bundle <= 1.73.2 - Authenticated (Contributor+) Local File Inclusion via 'theme' Parameterhttps://agentprime.io/advisories/CVE-2026-92174/https://agentprime.io/advisories/CVE-2026-92174/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 05:30:17 GMTCVECVE-2026-71426: GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" fieldhttps://agentprime.io/advisories/CVE-2026-71426/https://agentprime.io/advisories/CVE-2026-71426/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 19:39:29 GMTCVECVE-2026-96837: WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-96837/https://agentprime.io/advisories/CVE-2026-96837/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 12:27:47 GMTCVECVE-2026-89294: Simply Schedule Appointments <= 1.6.12.27 - Authenticated (Subscriber+) Local File Inclusion via 'ssa_locale' Parameterhttps://agentprime.io/advisories/CVE-2026-89294/https://agentprime.io/advisories/CVE-2026-89294/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 06:40:23 GMTCVECVE-2026-49850: InvoicePlane: Missing CSRF Protection on State-Changing delete Actionshttps://agentprime.io/advisories/CVE-2026-49850/https://agentprime.io/advisories/CVE-2026-49850/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:40:08 GMTCVECVE-2026-50547: InvoicePlane permits local file inclusion through the e-invoice XML configuration identifierhttps://agentprime.io/advisories/CVE-2026-50547/https://agentprime.io/advisories/CVE-2026-50547/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:38:31 GMTCVECVE-2026-39353: InvoicePlane: Remote Code Execution via Writable Templates Directoryhttps://agentprime.io/advisories/CVE-2026-39353/https://agentprime.io/advisories/CVE-2026-39353/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:30:58 GMTCVEcritical