** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Description
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
Published:
2026-08-25
Score:
n/a
EPSS:
n/a
KEV:
No
Impact:
n/a
Action:
n/a
Analysis
No data.
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
OpenCVE Recommended Actions
- Upgrade the Verdure Core plugin to a version newer than 1.2, or uninstall it if it is not required.
- If an upgrade cannot be performed immediately, disable the plugin entirely to eliminate the vulnerable code path.
- While the plugin remains in use, restrict execution of uploaded PHP by configuring the server or uploads directory (for example, add a .htaccess rule to block PHP execution) and limit accepted upload types to non‑executable formats.
Generated by OpenCVE AI on August 25, 2026 at 10:28 UTC.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
No reference.
History
Tue, 01 Sep 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Verdure Core <= 1.2 - Unauthenticated Local File Inclusion | |
| Weaknesses | CWE-98 | |
| References |
|
|
| Metrics |
cvssV3_1
|
Tue, 01 Sep 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. | ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage. |
Thu, 27 Aug 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 25 Aug 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Verdure Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. | |
| Title | Verdure Core <= 1.2 - Unauthenticated Local File Inclusion | |
| Weaknesses | CWE-98 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: REJECTED
Assigner: Wordfence
Published:
Updated: 2026-09-01T13:19:14.120Z
Reserved: 2026-08-24T20:04:42.580Z
Link: CVE-2026-78562
Vulnrichment
Updated:
NVD
Status : Rejected
Published: 2026-08-25T09:17:36.070
Modified: 2026-09-01T14:17:41.407
Link: CVE-2026-78562
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-25T10:30:05Z
Weaknesses
No weakness.