CVE-2026-66671: WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability

Q: Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or other prior privileges. Exploitation is network-accessible, although the attack complexity is rated high.

Q: Which installations are affected?

The affected software is the WordPress Verdure Core plugin at version 1.2 or earlier. The provided information does not state whether the plugin is enabled by default in any WordPress installation.

Q: What is the potential impact?

Successful exploitation can affect confidentiality, integrity, and availability at high impact levels. The vulnerability is classified as local file inclusion.

Published Aug 24, 2026

Updated

Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.

Affected Software

1 affected component

WordPress Verdure Core plugin<=1.2

Event History

Aug 24, 2026

CVE Published

via MITRE·11:54 AM

Data Sourced

via MITRE·11:54 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is unauthenticated, so an attacker does not need a WordPress account or other prior privileges. Exploitation is network-accessible, although the attack complexity is rated high.

Which installations are affected?

The affected software is the WordPress Verdure Core plugin at version 1.2 or earlier. The provided information does not state whether the plugin is enabled by default in any WordPress installation.

What is the potential impact?

Successful exploitation can affect confidentiality, integrity, and availability at high impact levels. The vulnerability is classified as local file inclusion.

CVE-2026-66671: WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which installations are affected?

What is the potential impact?