EIP-2026-114378

PRE-CVE

WP Rocket < 2.10.3 - Local File Inclusion (LFI)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114378. PoCs published by E1 Coders.

AI-analyzed exploit summary This script checks for a Local File Inclusion (LFI) vulnerability in WordPress WP Rocket Plugin versions 2.10.0 to 2.10.3 by testing access to a specific file path. It does not exploit the vulnerability but scans for its presence.

Description

WP Rocket < 2.10.3 - Local File Inclusion (LFI)

Exploits (1)

exploitdb SCANNER
by E1 Coders · pythonwebappsphp
https://www.exploit-db.com/exploits/51830

This script checks for a Local File Inclusion (LFI) vulnerability in WordPress WP Rocket Plugin versions 2.10.0 to 2.10.3 by testing access to a specific file path. It does not exploit the vulnerability but scans for its presence.

Classification
Scanner 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: WordPress WP Rocket Plugin versions 2.10.0 to 2.10.3
No auth needed
Prerequisites: Target must be running a vulnerable version of WP Rocket Plugin · Target must be accessible via HTTP
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026