CVE-2026-113402Medium· 6.5▾ SunlitArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to include PHP files outside the intended directory.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to include PHP files outside the intended directory.
armorx_spam < 8.15.2-3.282.133-1.90.061Update to version 8.15.2-3.282.133-1.90.061 or later
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113403Medium· 6.5ArmorX Global Technology｜ArmorX Spam - Command Injection
CVE-2026-111829Medium· 6.5WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability
CVE-2026-110284High· 7.5The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the [lifterlms_checkout] shortcode.…
CVE-2026-104909High· 8.1The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g
CVE-2026-103367High· 8.1The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name' parameter parameter
CVE-2026-104995High· 8.1The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the client-controlled 'bps_directory' cookie during BuddyPress AJAX director…