magentech vulnerabilities

Products

• FlashMart 1
• MaxShop 1
• Revo 1
• Rozy - Flower Shop 1
• SW Core 1
• Victo 1

Latest magentech CVEs

Newest publication first

1. CVE-2026-39661 WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability

   Published 2026-05-26

   High·CVSS 7.5 EPSS 0.42%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Magentech SW Core allows PHP Local File Inclusion. This issue affects SW Core: from n/a through 1.7.18.

2. CVE-2026-28048 WordPress FlashMart theme <= 2.0.15 - Local File Inclusion vulnerability

   Published 2026-03-05

   High·CVSS 8.1 EPSS 0.49%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech FlashMart flashmart allows PHP Local File Inclusion.This issue affects FlashMart: from n/a through <= 2.0.15.

3. CVE-2026-28047 WordPress Victo theme <= 1.4.16 - Local File Inclusion vulnerability

   Published 2026-03-05

   High·CVSS 8.1 EPSS 0.49%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Victo victo allows PHP Local File Inclusion.This issue affects Victo: from n/a through <= 1.4.16.

4. CVE-2025-69047 WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability

   Published 2026-01-22

   High·CVSS 8.1 EPSS 0.48%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech MaxShop sw_maxshop allows PHP Local File Inclusion.This issue affects MaxShop: from n/a through <= 3.6.20.

5. CVE-2025-12549 WordPress Rozy - Flower Shop theme <= 1.2.25 - Local File Inclusion vulnerability

   Published 2026-01-08

   High·CVSS 8.1 EPSS 0.57%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Rozy - Flower Shop rozy allows PHP Local File Inclusion.This issue affects Rozy - Flower Shop: from n/a through <= 1.2.25.

6. CVE-2025-39476 WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability

   Published 2025-06-09

   High·CVSS 7.5 EPSS 0.71%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech Revo revo allows PHP Local File Inclusion.This issue affects Revo: from n/a through <= 4.0.26.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.