Apache OpenOffice vulnerable to local file inclusion (CVE-2026-90627)
Local file inclusion via SQL provider and flat file database references in Apache OpenOffice through 4.1.16.
5 stories, newest first · one card per story
Local file inclusion via SQL provider and flat file database references in Apache OpenOffice through 4.1.16.

Attackers are exploiting WordPress LFI CVE-2026-87902 to write malicious PHP and seek remote code execution.

WordPress patched a critical unauthenticated path traversal that can enable PHP inclusion and RCE.

Attackers probed unauthenticated WordPress LFI CVE-2026-87902 within hours of the 7.1.2 patch.

WordPress 7.1.2 patches critical unauthenticated local file inclusion that can lead to remote code execution.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views