Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: magentech Clear all filters
TI-2026-28630 CVE-2026-39661 · GHSA-v2hv-46cp-3vh7

WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00418 Published 2026-05-26 No fix listed CWE-98
TI-2026-22389 CVE-2026-28048 · GHSA-mrc2-jmf8-gc6g

WordPress FlashMart theme <= 2.0.15 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech FlashMart flashmart allows PHP Local File Inclusion.This issue affects FlashMart: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00488 Published 2026-03-05 No fix listed CWE-98
TI-2026-22388 CVE-2026-28047 · GHSA-ggfm-2wpv-3r6f

WordPress Victo theme <= 1.4.16 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Victo victo allows PHP Local File Inclusion.This issue affects Victo: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00488 Published 2026-03-05 No fix listed CWE-98
TI-2025-42502 CVE-2025-69047 · GHSA-7gwr-23vp-cqjh

WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech MaxShop sw_maxshop allows PHP Local File Inclusion.This issue affects MaxShop: from n/a t…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-11512 CVE-2025-12549 · GHSA-9x6w-q427-m63g

WordPress Rozy - Flower Shop theme <= 1.2.25 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Rozy - Flower Shop rozy allows PHP Local File Inclusion.This issue affects Rozy - Flower…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00574 Published 2026-01-08 No fix listed CWE-98
TI-2025-26218 CVE-2025-39476 · GHSA-fr6p-xm3r-5vp9

WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Revo revo allows PHP Local File Inclusion.This issue affects Revo: from n/a through <= 4.…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00705 Published 2025-06-09 No fix listed CWE-98