VDB

GCVE-110-COMPOSER-2026-031905

GCVE-110-COMPOSER-2026-031905
Advisory Published
Vulnetix · Advisory published June 28, 2026
[PHP-SHELL-EXEC-VAR] PHP OS command execution sink invoked on a variable — matched: if (false === $this->initFilesystem($url)) {

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Affected Products

VendorProductVersionsPlatforms
packagistjazzman/wp-lscache* (affected)

References

advisory
web

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›