https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-26T06:01:08.876444+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2016-20101 CVE-2016-20101 — Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php 2026-10-26T06:01:09.599420+00:00

Affected: Pedro Marcelo Issuu Panel

Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value passed to require() to execute remote PHP code or include local files. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-20.