CVE-2016-20064: Myasui Wp Vault

Medium severity, CVSS 6.2. EPSS: 0.7% chance of exploitation in the next 30 days.

WP Vault 0.8.6.6 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting an unescaped parameter in the include functionality. Attackers can supply directory traversal sequences through the wpv-image GET parameter to access sensitive files like system configuration and credentials.

Affected products

• Myasui Wp Vault: version 0.8.6.6 only

Published 2026-06-09. Last modified 2026-07-21.