#lfi

0 stories this week · 0 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

Exploit-DBOct 1, 2026

Exploit-DB publishes a local file inclusion proof-of-concept for Food-Ordering 1.0.

CSO OnlineSep 24, 2026critical

WordPress patched critical unauthenticated RCE CVE-2026-87902 in 7.1.2; attackers weaponized pearcmd.php within hours of disclosure.

Exploited6 min readwordpress rce

PatchstackSep 22, 2026high

WordPress 7.1.2 fixes unauthenticated LFI CVE-2026-87902 that can reach remote code execution.

Apache MyFaces discloses moderate SSRF and local file inclusion vulnerability CVE-2026-68536 affecting all maintained 2.2 through 4.1 branches.

Exploit-DBAug 11, 2026

Public exploit released for directory traversal and local file inclusion in Ray 2.56.0, the widely used distributed ML framework.

Stories tagged #lfi