CVE-2026-28152
Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.
CVSS
8.1
Alto
EPSS
0.3%
p20
KEV
—
Exploit Today
6
0-100
Publicado: 24 ago 2026 · Última mod.: 24 ago 2026 · CWE-98
0.3%EPSS · 30 días0.3%
2026-08-252026-09-02
Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-325608.8 ALT27.3%
——8Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions.9dCVE-2026-666718.1 ALT20.3%
——6Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.10dCVE-2026-666708.1 ALT20.3%
——6Unauthenticated Local File Inclusion in Måne <= 1.7 versions.10dCVE-2026-665879.8 CRÍ20.4%
——6Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.10dCVE-2026-281518.1 ALT20.3%
——6Unauthenticated Local File Inclusion in Tonda < 2.6 versions.10dCVE-2026-665866.6 MED25.9%
——8Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.14d