My auctions allegro, CVE-2026-22464

CVE, Research URL: CVE-2026-22464
Home page URL: Security reports for My auctions allegro
Application: My auctions allegro
Published on: Jan 22, 2026
Research Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows PHP Local File Inclusion.This issue affects My auctions allegro: from n/a through <= 3.6.33.
Affected versions: max 3.6.33.
Status: vulnerable