1
CVEs
0
Critical
1
High
0
KEV
0
PoC
1
Unpatched C/H
0.0%
Patch Rate
0.5%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (27)
PHP
23
Wordpress Theme
20
Wordpress Plugin
6
Luxedrive
2
Mikado Core
2
Belfort
1
Techlink
1
Ch Teau
1
D R
1
Multioffice
1
Ashtanga
1
St L
1
Zoya
1
Emaurri
1
Curly Core
1
Kastell
1
Chapterone
1
Rosebud
1
Amfissa
1
Halstein
1
Easymeals
1
Deston
1
Foton Core
1
Esm E
1
Shiftup
1
Biagiotti Core
1
Verdure Core
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-78562 | Local File Inclusion in the Verdure Core WordPress plugin (versions ≤ 1.2) enables unauthenticated remote attackers to include and execute arbitrary PHP files on the server. Rooted in CWE-98 (improper PHP include/require path control), the flaw can be chained with file upload functionality - an attacker uploads a PHP-bearing image or other 'safe' file, then triggers the LFI to execute it - yielding full remote code execution, access control bypass, and sensitive data disclosure. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog. | HIGH | 8.1 | 0.5% | 41 |
No patch
|