CVE-2026-103367 - ShopMagic <= 4.9.0 - Unauthenticated Local File Inclusion via 'billing.first_name' Parameter
CVE ID :CVE-2026-103367 Published : Oct. 14, 2026, 8:17 a.m. | 1 hour, 15 minutes ago Description :The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first_name'...