CVE-2026-57796 | VLmes Leedo Plugin up to 3.0.0 on WordPress Include/Require Statement filename file inclusion

July 13, 2026 Yanac

A vulnerability was found in VLmes Leedo Plugin up to 3.0.0 on WordPress. It has been declared as critical. The impacted element is an unknown function of the component Include/Require Statement. Such manipulation of the argument filename leads to file inclusion.

This vulnerability is listed as CVE-2026-57796. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More