# File inclusion. A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32155.md) `CVE-2025-32155` · CVE record: markkinchin Beds24 Online Booking · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32154.md) `CVE-2025-32154` · CVE record: Catch Themes Catch Dark Mode · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress VG WooCarousel plugin <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32153.md) `CVE-2025-32153` · CVE record: vinagecko VG WooCarousel · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress Slider a SlidersPack Plugin <= 2.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32152.md) `CVE-2025-32152` · CVE record: Essential Plugin Slider a SlidersPack · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32151.md) `CVE-2025-32151` · CVE record: Themekraft BuddyForms · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32150.md) `CVE-2025-32150` · CVE record: Rameez Iqbal Real Estate Manager · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32146.md) `CVE-2025-32146` · CVE record: JoomSky JS Job Manager · CVSS 8.8 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32142.md) `CVE-2025-32142` · CVE record: Stylemix Motors · CVSS 8.8 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32141.md) `CVE-2025-32141` · CVE record: Stylemix MasterStudy LMS · CVSS 8.8 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress Fami WooCommerce Compare plugin <= 1.0.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-31405.md) `CVE-2025-31405` · CVE record: zankover Fami WooCommerce Compare · CVSS 7.5 High · Not analysed yet · Published 4 Apr 2025 · Tags: File inclusion - [WordPress DeBounce Email Validator plugin <= 5.7 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-31098.md) `CVE-2025-31098` · CVE record: debounce DeBounce Email Validator · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2025 · Tags: File inclusion - [WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-31097.md) `CVE-2025-31097` · CVE record: Hossein Material Dashboard · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 · Tags: File inclusion - [WordPress News & Blog Designer Pack plugin <= 4.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-31082.md) `CVE-2025-31082` · CVE record: InfornWeb News & Blog Designer Pack · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 · Tags: File inclusion - [WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30901.md) `CVE-2025-30901` · CVE record: JoomSky JS Help Desk · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 · Tags: File inclusion - [WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30870.md) `CVE-2025-30870` · CVE record: WP Travel Engine WP Travel Engine · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 · Tags: File inclusion - [WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-30849.md) `CVE-2025-30849` · CVE record: g5theme Essential Real Estate · CVSS 8.1 High · Not analysed yet · Published 1 Apr 2025 · Tags: File inclusion - [WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30782.md) `CVE-2025-30782` · CVE record: WP Shuffle Subscribe to Download Lite · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2025 · Tags: File inclusion - [WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-31387.md) `CVE-2025-31387` · CVE record: InstaWP InstaWP Connect · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2025 · Tags: File inclusion - [WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-31016.md) `CVE-2025-31016` · CVE record: Crocoblock JetWooBuilder · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2025 · Tags: File inclusion - [WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30835.md) `CVE-2025-30835` · CVE record: Bastien Ho Accounting for WooCommerce · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2025 · Tags: File inclusion - [WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-31432.md) `CVE-2025-31432` · CVE record: Chop Chop Pop-Up Chop Chop · CVSS 7.5 High · Not analysed yet · Published 28 Mar 2025 · Tags: File inclusion - [WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26890.md) `CVE-2025-26890` · CVE record: RealMag777 HUSKY · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability](https://agentprime.io/advisories/CVE-2025-26909.md) `CVE-2025-26909` · CVE record: John Darrel Hide My WP Ghost · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30891.md) `CVE-2025-30891` · CVE record: magepeopleteam WpTravelly · CVSS 8.8 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress Login Widget for Ultimate Member plugin <= 1.1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30890.md) `CVE-2025-30890` · CVE record: SuitePlugins Login Widget for Ultimate Member · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30871.md) `CVE-2025-30871` · CVE record: WP Travel Engine WP Travel Engine · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-30868.md) `CVE-2025-30868` · CVE record: Maidul Team Manager · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30846.md) `CVE-2025-30846` · CVE record: jetmonsters Restaurant Menu by MotoPress · CVSS 8.8 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30845.md) `CVE-2025-30845` · CVE record: webangon The Pack Elementor addons · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30831.md) `CVE-2025-30831` · CVE record: themifyme Themify Event Post · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30829.md) `CVE-2025-30829` · CVE record: Arraytics WPCafe · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-30820.md) `CVE-2025-30820` · CVE record: HT Plugins WishSuite · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-30814.md) `CVE-2025-30814` · CVE record: RadiusTheme The Post Grid · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-30785.md) `CVE-2025-30785` · CVE record: WP Shuffle Subscribe to Download Lite · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2025 · Tags: File inclusion - [WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26986.md) `CVE-2025-26986` · CVE record: StylemixThemes Pearl - Corporate Business · CVSS 8.1 High · Not analysed yet · Published 26 Mar 2025 · Tags: File inclusion - [WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-27015.md) `CVE-2025-27015` · CVE record: designingmedia Hostiko · CVSS 7.5 High · Not analysed yet · Published 26 Mar 2025 · Tags: File inclusion - [WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-28916.md) `CVE-2025-28916` · CVE record: Rashid Docpro · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2025 · Tags: File inclusion - [WordPress Formality Plugin <= 1.5.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-24690.md) `CVE-2025-24690` · CVE record: Michele Giorgi Formality · CVSS 8.1 High · Not analysed yet · Published 26 Mar 2025 · Tags: File inclusion - [WordPress Custom Field List Widget Plugin <= 1.5.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-23952.md) `CVE-2025-23952` · CVE record: ntm custom-field-list-widget · CVSS 8.1 High · Not analysed yet · Published 26 Mar 2025 · Tags: File inclusion - [WordPress LinkedIn Lite Plugin <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-23937.md) `CVE-2025-23937` · CVE record: Alex Furr LinkedIn Lite · CVSS 8.1 High · Not analysed yet · Published 26 Mar 2025 · Tags: File inclusion - [MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion](https://agentprime.io/advisories/CVE-2024-13790.md) `CVE-2024-13790` · CVE record: ThemeMove MinimogWP – The High Converting eCommerce WordPress Theme · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Mar 2025 · Tags: File inclusion - [s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode](https://agentprime.io/advisories/CVE-2024-12563.md) `CVE-2024-12563` · CVE record: WP Sharks s2Member Pro · CVSS 8.8 High · Not analysed yet · Published 18 Mar 2025 · Tags: File inclusion - [Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=.](https://agentprime.io/advisories/CVE-2025-26137.md) `CVE-2025-26137` · CVE record · CVSS 7.5 High · Not analysed yet · Published 18 Mar 2025 · Tags: File inclusion - [Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post](https://agentprime.io/advisories/CVE-2025-1771.md) `CVE-2025-1771` · CVE record: ShineTheme Travel Booking WordPress Theme · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Mar 2025 · Tags: File inclusion - [Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta](https://agentprime.io/advisories/CVE-2025-1707.md) `CVE-2025-1707` · CVE record: techlabpro1 Review Schema – Review & Structure Data Schema Plugin · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: File inclusion - [A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell throu…](https://agentprime.io/advisories/CVE-2024-51319.md) `CVE-2024-51319` · CVE record · CVSS 7.3 High · Not analysed yet · Published 11 Mar 2025 · Tags: File inclusion - [WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26916.md) `CVE-2025-26916` · CVE record: Pixflow Massive Dynamic · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Mar 2025 · Tags: File inclusion - [WordPress Place Order Without Payment for WooCommerce plugin <= 2.6.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26933.md) `CVE-2025-26933` · CVE record: Nitin Prakash WC Place Order Without Payment · CVSS 7.5 High · Not analysed yet · Published 10 Mar 2025 · Tags: File inclusion - [WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-27264.md) `CVE-2025-27264` · CVE record: Creativeitem Doctor Appointment Booking · CVSS 7.5 High · Not analysed yet · Published 3 Mar 2025 · Tags: File inclusion - [WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-25109.md) `CVE-2025-25109` · CVE record: JoomSky WP Vehicle Manager · CVSS 8.1 High · Not analysed yet · Published 3 Mar 2025 · Tags: File inclusion - [WordPress Popliup Plugin <= 1.1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-23945.md) `CVE-2025-23945` · CVE record: Webliup Popliup · CVSS 7.5 High · Not analysed yet · Published 3 Mar 2025 · Tags: File inclusion - [Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a cr…](https://agentprime.io/advisories/CVE-2023-49031.md) `CVE-2023-49031` · CVE record · CVSS 5.1 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: File inclusion - [WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update](https://agentprime.io/advisories/CVE-2024-9193.md) `CVE-2024-9193` · CVE record: creativeon WHMpress - WHMCS WordPress Integration Plugin · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Feb 2025 · Tags: File inclusion - [Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode](https://agentprime.io/advisories/CVE-2024-12811.md) `CVE-2024-12811` · CVE record: ShineTheme Travel Booking WordPress Theme · CVSS 8.8 High · Not analysed yet · Published 27 Feb 2025 · Tags: File inclusion - [WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26979.md) `CVE-2025-26979` · CVE record: Aman Funnel Builder by FunnelKit · CVSS 7.5 High · Not analysed yet · Published 25 Feb 2025 · Tags: File inclusion - [WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26964.md) `CVE-2025-26964` · CVE record: Arraytics Eventin · CVSS 7.5 High · Not analysed yet · Published 25 Feb 2025 · Tags: File inclusion - [WordPress Affiliate Coupons plugin <= 1.7.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26957.md) `CVE-2025-26957` · CVE record: Deetronix Affiliate Coupons · CVSS 7.5 High · Not analysed yet · Published 25 Feb 2025 · Tags: File inclusion - [WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26932.md) `CVE-2025-26932` · CVE record: QuantumCloud ChatBot · CVSS 7.5 High · Not analysed yet · Published 25 Feb 2025 · Tags: File inclusion - [WordPress Majestic Support plugin <= 1.0.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26985.md) `CVE-2025-26985` · CVE record: Majestic Support Majestic Support · CVSS 8.1 High · Not analysed yet · Published 25 Feb 2025 · Tags: File inclusion - [WordPress VG PostCarousel plugin <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-27272.md) `CVE-2025-27272` · CVE record: vinagecko VG PostCarousel · CVSS 7.5 High · Not analysed yet · Published 24 Feb 2025 · Tags: File inclusion Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .