# File inclusion. A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26760.md) `CVE-2025-26760` · CVE record: Wow-Company Calculator Builder · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2025 · Tags: File inclusion - [WordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-26757.md) `CVE-2025-26757` · CVE record: FULL SERVICES FULL Customer · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2025 · Tags: File inclusion - [Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-13353.md) `CVE-2024-13353` · CVE record: cyberchimps Responsive Addons for Elementor – Free Elementor Addons, Kits and Elementor Templates · CVSS 8.8 High · Not analysed yet · Published 21 Feb 2025 · Tags: File inclusion - [Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-13592.md) `CVE-2024-13592` · CVE record: labibahmed42 Team Builder For WPBakery Page Builder(Formerly Visual Composer) · CVSS 7.5 High · Not analysed yet · Published 19 Feb 2025 · Tags: File inclusion - [WordPress Cookie Monster Plugin <= 1.2.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-22656.md) `CVE-2025-22656` · CVE record: Oscar Alvarez Cookie Monster · CVSS 8.1 High · Not analysed yet · Published 18 Feb 2025 · Tags: File inclusion - [WordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-25141.md) `CVE-2025-25141` · CVE record: zankover Fami Sales Popup · CVSS 7.5 High · Not analysed yet · Published 7 Feb 2025 · Tags: File inclusion - [BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode](https://agentprime.io/advisories/CVE-2024-12859.md) `CVE-2024-12859` · CVE record: PX-lab BoomBox Theme Extensions · CVSS 8.8 High · Not analysed yet · Published 3 Feb 2025 · Tags: File inclusion - [Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)](https://agentprime.io/advisories/CVE-2025-0366.md) `CVE-2025-0366` · CVE record: artbees Jupiter X Core · CVSS 8.8 High · Not analysed yet · Published 1 Feb 2025 · Tags: File inclusion - [WordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-24782.md) `CVE-2025-24782` · CVE record: wpWax Post Grid, Slider & Carousel Ultimate · CVSS 6.5 Medium · Not analysed yet · Published 27 Jan 2025 · Tags: File inclusion - [ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode](https://agentprime.io/advisories/CVE-2025-0682.md) `CVE-2025-0682` · CVE record: ThemeREX ThemeREX Addons · CVSS 8.8 High · Not analysed yet · Published 25 Jan 2025 · Tags: File inclusion - [WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-24733.md) `CVE-2025-24733` · CVE record: Akhtarujjaman Shuvo Post Grid Master · CVSS 6.5 Medium · Not analysed yet · Published 24 Jan 2025 · Tags: File inclusion - [IBM Maximo Asset Management file upload](https://agentprime.io/advisories/CVE-2024-45077.md) `CVE-2024-45077` · CVE record: IBM Maximo Asset Management · CVSS 6.5 Medium · Not analysed yet · Published 24 Jan 2025 · Tags: File inclusion - [Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-13408.md) `CVE-2024-13408` · CVE record: wpwax Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget · CVSS 7.5 High · Not analysed yet · Published 24 Jan 2025 · Tags: File inclusion - [BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-13593.md) `CVE-2024-13593` · CVE record: otrok7 BMLT Meeting Map · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2025 · Tags: File inclusion - [WordPress Improved Sale Badges – Free Version Plugin <= 1.0.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-23949.md) `CVE-2025-23949` · CVE record: dzeriho Improved Sale Badges – Free Version · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2025 · Tags: File inclusion - [WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-23948.md) `CVE-2025-23948` · CVE record: Webarea Background animation blocks · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2025 · Tags: File inclusion - [WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-23938.md) `CVE-2025-23938` · CVE record: CRUDLab Image Gallery Box by CRUDLab · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2025 · Tags: File inclusion - [WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-22311.md) `CVE-2025-22311` · CVE record: DeluxeThemes Private Messages for UserPro · CVSS 7.5 High · Not analysed yet · Published 21 Jan 2025 · Tags: File inclusion - [WordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-23915.md) `CVE-2025-23915` · CVE record: roninwp FAT Event Lite · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2025 · Tags: File inclusion - [WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-22508.md) `CVE-2025-22508` · CVE record: roninwp FAT Event Lite · CVSS 8.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: File inclusion - [Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale](https://agentprime.io/advisories/GHSA-j3f9-p6hm-5w6q.md) `GHSA-j3f9-p6hm-5w6q`, `CVE-2025-22145`, `PKSA-csyb-yc4p-mnbs` · Packagist `nesbot/carbon`: affected `<2.72.6 || >=3.0.0, <3.8.4`, fixed in `2.72.6`, `3.8.4` · CVSS 6.3 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: File inclusion - [WordPress Rezgo Online Booking plugin <= 4.17 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-53800.md) `CVE-2024-53800` · CVE record: rezgo Rezgo · CVSS 8.1 High · Not analysed yet · Published 7 Jan 2025 · Tags: File inclusion - [WordPress Build App Online plugin <= 1.0.23 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-49649.md) `CVE-2024-49649` · CVE record: hakeemnala Build App Online · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jan 2025 · Tags: File inclusion - [WordPress 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin <= 5.2.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-56281.md) `CVE-2024-56281` · CVE record: codemstory 워드프레스 결제 심플페이 · CVSS 7.5 High · Not analysed yet · Published 7 Jan 2025 · Tags: File inclusion - [WordPress WPMozo Addons Lite for Elementor plugin <= 1.1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-56282.md) `CVE-2024-56282` · CVE record: Elicus WPMozo Addons Lite for Elementor · CVSS 7.5 High · Not analysed yet · Published 7 Jan 2025 · Tags: File inclusion - [WordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-22305.md) `CVE-2025-22305` · CVE record: Essential Plugin Hero Banner Ultimate · CVSS 6.5 Medium · Not analysed yet · Published 7 Jan 2025 · Tags: File inclusion - [WordPress Ach Invoice App plugin <= 1.0.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-22364.md) `CVE-2025-22364` · CVE record: Service Shogun Ach Invoice App · CVSS 7.5 High · Not analysed yet · Published 7 Jan 2025 · Tags: File inclusion - [WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-56216.md) `CVE-2024-56216` · CVE record: themifyme Themify Builder · CVSS 6.5 Medium · Not analysed yet · Published 31 Dec 2024 · Tags: File inclusion - [WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-56230.md) `CVE-2024-56230` · CVE record: Maidul Dynamic Product Category Grid, Slider for WooCommerce · CVSS 7.5 High · Not analysed yet · Published 31 Dec 2024 · Tags: File inclusion - [WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-12272.md) `CVE-2024-12272` · CVE record: wptravelengine WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor · CVSS 8.8 High · Not analysed yet · Published 25 Dec 2024 · Tags: File inclusion - [Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion](https://agentprime.io/advisories/CVE-2024-12571.md) `CVE-2024-12571` · CVE record: moaluko Store Locator for WordPress with Google Maps – LotsOfLocales · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Dec 2024 · Tags: File inclusion - [WordPress Axeptio plugin <= 2.5.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-54270.md) `CVE-2024-54270` · CVE record: Axeptio Axeptio · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2024 · Tags: File inclusion - [WordPress EazyDocs plugin <= 2.8.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-54376.md) `CVE-2024-54376` · CVE record: Spider Themes EazyDocs · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2024 · Tags: File inclusion - [Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion via 'theme'](https://agentprime.io/advisories/CVE-2024-12040.md) `CVE-2024-12040` · CVE record: wpwax Product Carousel Slider & Grid Ultimate for WooCommerce · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2024 · Tags: File inclusion - [WordPress Team Member – Multi Language Supported Team plugin <= 7.4 - Limited Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52385.md) `CVE-2024-52385` · CVE record: wpmart Team Member · CVSS 4.3 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: File inclusion - [WordPress Designer plugin <= 1.4.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-54225.md) `CVE-2024-54225` · CVE record: codegearthemes Designer · CVSS 7.5 High · Not analysed yet · Published 9 Dec 2024 · Tags: File inclusion - [WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion](https://agentprime.io/advisories/CVE-2024-12209.md) `CVE-2024-12209` · CVE record: wphealth WP Umbrella: Update Backup Restore & Monitoring · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 8 Dec 2024 · Tags: File inclusion - [WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-53824.md) `CVE-2024-53824` · CVE record: all_bootstrap_blocks All Bootstrap Blocks · CVSS 7.5 High · Not analysed yet · Published 6 Dec 2024 · Tags: File inclusion - [Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion](https://agentprime.io/advisories/CVE-2024-11289.md) `CVE-2024-11289` · CVE record: pencidesign Soledad · CVSS 8.1 High · Not analysed yet · Published 6 Dec 2024 · Tags: File inclusion - [Local File Inclusion](https://agentprime.io/advisories/CVE-2024-51541.md) `CVE-2024-51541` · CVE record: ABB ASPECT-Enterprise and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: File inclusion - [Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-11429.md) `CVE-2024-11429` · CVE record: premio Stars Testimonials — Responsive Reviews & Star Ratings · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2024 · Tags: File inclusion - [WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-53739.md) `CVE-2024-53739` · CVE record: Cool Plugins Cryptocurrency Widgets For Elementor · CVSS 8.1 High · Not analysed yet · Published 30 Nov 2024 · Tags: File inclusion - [WordPress Absolute Addons For Elementor plugin <= 1.0.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52496.md) `CVE-2024-52496` · CVE record: AbsolutePlugins Absolute Addons For Elementor · CVSS 7.5 High · Not analysed yet · Published 28 Nov 2024 · Tags: File inclusion - [WordPress Shopready plugin <= 3.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52497.md) `CVE-2024-52497` · CVE record: quomodosoft Shopready · CVSS 7.5 High · Not analysed yet · Published 28 Nov 2024 · Tags: File inclusion - [WordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52499.md) `CVE-2024-52499` · CVE record: Ibrahim Pricing table addon for elementor · CVSS 7.5 High · Not analysed yet · Published 28 Nov 2024 · Tags: File inclusion - [WordPress Office Locator plugin <= 1.3.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52501.md) `CVE-2024-52501` · CVE record: WebbyTemplate Office Locator · CVSS 7.5 High · Not analysed yet · Published 28 Nov 2024 · Tags: File inclusion - [LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-10873.md) `CVE-2024-10873` · CVE record: choijun LA-Studio Element Kit for Elementor · CVSS 8.8 High · Not analysed yet · Published 23 Nov 2024 · Tags: File inclusion - [Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-10898.md) `CVE-2024-10898` · CVE record: krishaweb Email addon for CF7 · CVSS 8.8 High · Not analysed yet · Published 21 Nov 2024 · Tags: File inclusion - [WordPress nBlocks plugin <= 1.0.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52450.md) `CVE-2024-52450` · CVE record: officialprocoders nBlocks · CVSS 7.5 High · Not analysed yet · Published 20 Nov 2024 · Tags: File inclusion - [WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52428.md) `CVE-2024-52428` · CVE record: Peter Ads Booster by Ads Pro · CVSS 8.1 High · Not analysed yet · Published 18 Nov 2024 · Tags: File inclusion - [WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52386.md) `CVE-2024-52386` · CVE record: RadiusTheme Classified Listing · CVSS 5.3 Medium · Not analysed yet · Published 16 Nov 2024 · Tags: File inclusion - [WordPress ZIJ KART plugin <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-52381.md) `CVE-2024-52381` · CVE record: Shoaib Rehmat ZIJ KART · CVSS 8.1 High · Not analysed yet · Published 14 Nov 2024 · Tags: File inclusion - [Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source](https://agentprime.io/advisories/CVE-2024-10571.md) `CVE-2024-10571` · CVE record: ays-pro Chartify – WordPress Chart Plugin · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2024 · Tags: File inclusion - [Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion](https://agentprime.io/advisories/CVE-2024-10871.md) `CVE-2024-10871` · CVE record: trustyplugins Category AJAX Filter – Advanced Filter for Posts & Custom Post Types · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Nov 2024 · Tags: File inclusion - [WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion](https://agentprime.io/advisories/CVE-2024-10436.md) `CVE-2024-10436` · CVE record: wpclever WPC Smart Messages for WooCommerce · CVSS 8.8 High · Not analysed yet · Published 29 Oct 2024 · Tags: File inclusion - [WordPress NewsCard theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-50434.md) `CVE-2024-50434` · CVE record: themehorse NewsCard · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2024 · Tags: File inclusion - [WordPress Meta News theme <= 1.1.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-50435.md) `CVE-2024-50435` · CVE record: themehorse Meta News · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2024 · Tags: File inclusion - [WordPress Clean Retina theme <= 3.0.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-50436.md) `CVE-2024-50436` · CVE record: themehorse Clean Retina · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2024 · Tags: File inclusion - [WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-50457.md) `CVE-2024-50457` · CVE record: Qode Qode Essential Addons · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2024 · Tags: File inclusion - [WordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-50497.md) `CVE-2024-50497` · CVE record: wdesco Advanced Online Ordering and Delivery Platform · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2024 · Tags: File inclusion Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .