Description
Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SpabRice | Vavo Core | ≤ 2.3.0 | — |
High · 8.1
CVE-2026-28570
EUVD-2026-60895GHSA-2rw8-9q84-mmgp
WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack