CVE-2026-78562

Name of the Vulnerable Software and Affected Versions Verdure Core versions prior to 1.3

Description The Verdure Core plugin for WordPress contains a Local File Inclusion flaw. This allows unauthenticated attackers to include and execute arbitrary files on the server, enabling the execution of PHP code within those files. This issue can be leveraged to bypass access controls, retrieve sensitive data, or achieve remote code execution if images or other safe file types can be uploaded and subsequently included.

Recommendations Update the plugin to a version later than 1.2.