# File inclusion. A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53578.md) `CVE-2025-53578` · CVE record: gavias Kipso · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53576.md) `CVE-2025-53576` · CVE record: ovatheme Ovatheme Events · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53334.md) `CVE-2025-53334` · CVE record: TieLabs Jannah · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53328.md) `CVE-2025-53328` · CVE record: Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53326.md) `CVE-2025-53326` · CVE record: CodeYatri Gutenify · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53248.md) `CVE-2025-53248` · CVE record: unfoldwp Magazine · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53247.md) `CVE-2025-53247` · CVE record: wpinterface BlogMarks · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53244.md) `CVE-2025-53244` · CVE record: unfoldwp Magazine Elite · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53227.md) `CVE-2025-53227` · CVE record: unfoldwp Magazine Saga · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Glamer Theme <= 1.0.2 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53216.md) `CVE-2025-53216` · CVE record: themeuniver Glamer · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49405.md) `CVE-2025-49405` · CVE record: Favethemes Houzez · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Neresa Theme <= 1.3 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49383.md) `CVE-2025-49383` · CVE record: CocoBasic Neresa · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion - [WordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49426.md) `CVE-2025-49426` · CVE record: Dahz Kitring · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Anotte theme <= 1.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49436.md) `CVE-2025-49436` · CVE record: CocoBasic Anotte · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49889.md) `CVE-2025-49889` · CVE record: Edge-Themes Edge CPT · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49892.md) `CVE-2025-49892` · CVE record: uxper Uxper Booking · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49894.md) `CVE-2025-49894` · CVE record: uxper Nuss · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Cook&Meal <= 1.2.3 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48149.md) `CVE-2025-48149` · CVE record: dedalx Cook&Meal · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Formality <= 1.5.9 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48157.md) `CVE-2025-48157` · CVE record: Michele Giorgi Formality · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Caliris <= 1.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48160.md) `CVE-2025-48160` · CVE record: CocoBasic Caliris · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48171.md) `CVE-2025-48171` · CVE record: thembay Cena Store · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress SEOPress for MainWP <= 1.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48298.md) `CVE-2025-48298` · CVE record: Benjamin Denis SEOPress for MainWP · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48302.md) `CVE-2025-48302` · CVE record: Roxnor FundEngine · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53198.md) `CVE-2025-53198` · CVE record: favethemes Houzez · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53204.md) `CVE-2025-53204` · CVE record: ovatheme eventlist · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53207.md) `CVE-2025-53207` · CVE record: WP Travel WP Travel Gutenberg Blocks · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53210.md) `CVE-2025-53210` · CVE record: bdthemes ZoloBlocks · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53565.md) `CVE-2025-53565` · CVE record: RadiusTheme Widget for Google Reviews · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53567.md) `CVE-2025-53567` · CVE record: nK Ghost Kit · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54017.md) `CVE-2025-54017` · CVE record: Cozmoslabs Paid Member Subscriptions · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress CF7 WOW Styler Plugin <= 1.7.2 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54028.md) `CVE-2025-54028` · CVE record: Saleswonder Team: Tobias CF7 WOW Styler · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54031.md) `CVE-2025-54031` · CVE record: Schiocco Support Board · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-54034.md) `CVE-2025-54034` · CVE record: Tribulant Software Newsletters · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54750.md) `CVE-2025-54750` · CVE record: Aman Funnel Builder by FunnelKit · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: File inclusion - [Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'](https://agentprime.io/advisories/CVE-2025-8142.md) `CVE-2025-8142` · CVE record: pencidesign Soledad · CVSS 8.8 High · Not analysed yet · Published 16 Aug 2025 · Tags: File inclusion - [Woocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-8393.md) `CVE-2024-8393` · CVE record: delabon Woocommerce Blocks – Woolook · CVSS 6.6 Medium · Not analysed yet · Published 16 Aug 2025 · Tags: File inclusion - [BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-7650.md) `CVE-2025-7650` · CVE record: setriosoft BizCalendar Web · CVSS 7.5 High · Not analysed yet · Published 15 Aug 2025 · Tags: File inclusion - [WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54701.md) `CVE-2025-54701` · CVE record: ThemeMove Unicamp · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54700.md) `CVE-2025-54700` · CVE record: ThemeMove Makeaholic · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Xinterio Theme <= 4.2 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54690.md) `CVE-2025-54690` · CVE record: themeStek Xinterio · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54689.md) `CVE-2025-54689` · CVE record: thembay Urna · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-3703.md) `CVE-2025-3703` · CVE record: wipeoutmedia CSS & JavaScript Toolbox · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-24766.md) `CVE-2025-24766` · CVE record: wproyal News Magazine X · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-25172.md) `CVE-2025-25172` · CVE record: beeteam368 VidMov · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-25174.md) `CVE-2025-25174` · CVE record: beeteam368 BeeTeam368 Extensions · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-28979.md) `CVE-2025-28979` · CVE record: ThimPress WP Pipes · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-30635.md) `CVE-2025-30635` · CVE record: ThemeAtelier IDonatePro · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress RT-Theme 18 | Extensions plugin <= 2.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-32288.md) `CVE-2025-32288` · CVE record: stmcan RT-Theme 18 | Extensions · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-48293.md) `CVE-2025-48293` · CVE record: Dylan Kuhn Geo Mashup · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48332.md) `CVE-2025-48332` · CVE record: PublishPress Gutenberg Blocks · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49036.md) `CVE-2025-49036` · CVE record: octagonwebstudio Premium Addons for KingComposer · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49264.md) `CVE-2025-49264` · CVE record: Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-49271.md) `CVE-2025-49271` · CVE record: GravityWP GravityWP - Merge Tags · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-52716.md) `CVE-2025-52716` · CVE record: Acato WP REST Cache · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-52728.md) `CVE-2025-52728` · CVE record: WebCodingPlace Responsive Posts Carousel Pro · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-52732.md) `CVE-2025-52732` · CVE record: RealMag777 GMap Targeting · CVSS 8.8 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-52806.md) `CVE-2025-52806` · CVE record: eyecix JobSearch · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: File inclusion - [WellChoose｜Organization Portal System - Local File Inclusion](https://agentprime.io/advisories/CVE-2025-8913.md) `CVE-2025-8913` · CVE record: WellChoose Organization Portal System · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2025 · Tags: File inclusion - [A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile()' function ca…](https://agentprime.io/advisories/CVE-2025-51057.md) `CVE-2025-51057` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: File inclusion - [WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion](https://agentprime.io/advisories/CVE-2012-10025.md) `CVE-2012-10025` · CVE record: Advanced Custom Fields WordPress Plugin · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2025 · Tags: File inclusion Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .