WebGeniusLab vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WebGeniusLab products: 5 record(s), with severity, exploitation and fixes.

BigHearts 1 Thegov Core 1 Integrio Core 1 Softlab Core 1 iRecco Core 1

Exploited only (KEV) →

CVE-2026-34895 High · 8.1 CWE-98 Jun 17, 2026

WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.

CVE-2026-34894 High · 8.1 CWE-98 Jun 17, 2026

WordPress Integrio Core plugin < 1.2.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.

CVE-2026-34893 High · 8.1 CWE-98 Jun 17, 2026

WordPress Thegov Core plugin < 2.0.23 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.

CVE-2026-32439 Medium · 5.3 CWE-862 Mar 13, 2026

WordPress BigHearts theme <= 3.1.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BigHearts: from n/a through <= 3.1.14.

CVE-2025-69046 High · 8.1 CWE-98 Jan 22, 2026

WordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebGeniusLab iRecco Core irecco-core allows PHP Local File Inclusion.This issue affects iRecco Core: from n/a through <= 1.3.6.