Approved changes feed: RSS · Atom

cpe:2.3:a:brandfolder:brandfolder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBrandfolder (586363d7-2b7b-5a85-b43c-29949bc7357e)
ProductBrandfolder (451bab89-86b0-5706-8697-e42f741b2c06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-20080 vulnerable 2026-07-28 18:32:21.593659 WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php
MEDIUM (6.2)
WordPress Brandfolder plugin version 3.0 and earlier contains a local file inclusion vulnerability in callback.php that allows unauthenticated attackers to include arbitrary files by manipulating the wp_abspath parameter. Attackers can supply path traversal sequences or remote URLs through the wp_abspath parameter to read sensitive files like wp-config.php or execute remote code.
Published: 2026-06-15T12:00:47.146Z
Updated: 2026-06-15T19:24:28.084Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.