# File inclusion. A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WordPress Greenify theme <= 2.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58994.md) `CVE-2025-58994` · CVE record: designervily Greenify · CVSS 8.1 High · Not analysed yet · Published 6 Nov 2025 · Tags: File inclusion - [WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53252.md) `CVE-2025-53252` · CVE record: zozothemes Zegen · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2025 · Tags: File inclusion - [WordPress Real Time Validation for Gravity Forms <= 1.7.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-48330.md) `CVE-2025-48330` · CVE record: Daman Jeet Real Time Validation for Gravity Forms · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2025 · Tags: File inclusion - [WordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-48290.md) `CVE-2025-48290` · CVE record: bslthemes Kinsley · CVSS 8.1 High · Not analysed yet · Published 6 Nov 2025 · Tags: File inclusion - [WordPress Modal Survey plugin <= 2.0.2.0.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-39468.md) `CVE-2025-39468` · CVE record: pantherius Modal Survey · CVSS 8.1 High · Not analysed yet · Published 6 Nov 2025 · Tags: File inclusion - [WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-39466.md) `CVE-2025-39466` · CVE record: Mikado-Themes Dør · CVSS 8.1 High · Not analysed yet · Published 6 Nov 2025 · Tags: File inclusion - [WordPress Dessau theme < 1.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-39463.md) `CVE-2025-39463` · CVE record: Select-Themes Dessau · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2025 · Tags: File inclusion - [Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args\[extra_template_path\]](https://agentprime.io/advisories/CVE-2025-12497.md) `CVE-2025-12497` · CVE record: averta Premium Portfolio Features for Phlox theme · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2025 · Tags: File inclusion - [Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-11704.md) `CVE-2025-11704` · CVE record: impacttechlab Elegance Menu · CVSS 7.5 High · Not analysed yet · Published 4 Nov 2025 · Tags: File inclusion - [WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode](https://agentprime.io/advisories/CVE-2025-11920.md) `CVE-2025-11920` · CVE record: whyun WPCOM Member · CVSS 8.8 High · Not analysed yet · Published 1 Nov 2025 · Tags: File inclusion - [WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-64364.md) `CVE-2025-64364` · CVE record: StylemixThemes Masterstudy · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2025 · Tags: File inclusion - [WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-64363.md) `CVE-2025-64363` · CVE record: SeventhQueen Kleo · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2025 · Tags: File inclusion - [WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-64360.md) `CVE-2025-64360` · CVE record: StylemixThemes Consulting Elementor Widgets · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2025 · Tags: File inclusion - [WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-64359.md) `CVE-2025-64359` · CVE record: StylemixThemes Consulting · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2025 · Tags: File inclusion - [Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis](https://agentprime.io/advisories/CVE-2024-14002.md) `CVE-2024-14002` · CVE record: Nagios XI · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2025 · Tags: File inclusion - [WordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-64284.md) `CVE-2025-64284` · CVE record: Majestic Support Majestic Support · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2025 · Tags: File inclusion - [WordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-64216.md) `CVE-2025-64216` · CVE record: ThemeSphere SmartMag · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2025 · Tags: File inclusion - [WordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-64195.md) `CVE-2025-64195` · CVE record: ThimPress Eduma · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2025 · Tags: File inclusion - [WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-62868.md) `CVE-2025-62868` · CVE record: Edge-Themes Edge CPT · CVSS 8.1 High · Not analysed yet · Published 24 Oct 2025 · Tags: File inclusion - [Local File Inclusion in ArkSigner's AcBakImzala](https://agentprime.io/advisories/CVE-2025-11023.md) `CVE-2025-11023` · CVE record: ArkSigner Software and Hardware Inc. AcBakImzala · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2025 · Tags: File inclusion, CWE-829 - [WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-62054.md) `CVE-2025-62054` · CVE record: favethemes Houzez Theme - Functionality · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress Grevo theme <= 2.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-62029.md) `CVE-2025-62029` · CVE record: themesion Grevo · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-59564.md) `CVE-2025-59564` · CVE record: ThemeMove EduMall · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-59558.md) `CVE-2025-59558` · CVE record: ThemeMove Billey · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-59555.md) `CVE-2025-59555` · CVE record: ThemeMove Medizin · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress Xcare theme < 6.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-59550.md) `CVE-2025-59550` · CVE record: designervily Xcare · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58967.md) `CVE-2025-58967` · CVE record: ThemeMove Businext · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-58958.md) `CVE-2025-58958` · CVE record: ThemeMove SmilePure · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress Karzo theme < 2.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58955.md) `CVE-2025-58955` · CVE record: designervily Karzo · CVSS 8.1 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49935.md) `CVE-2025-49935` · CVE record: xtemos WoodMart · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49921.md) `CVE-2025-49921` · CVE record: Crocoblock JetReviews · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress WP Abstracts plugin <= 2.7.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-48338.md) `CVE-2025-48338` · CVE record: Kevon Adonis WP Abstracts · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-32657.md) `CVE-2025-32657` · CVE record: RadiusTheme Testimonial Slider And Showcase Pro · CVSS 7.5 High · Not analysed yet · Published 22 Oct 2025 · Tags: File inclusion - [Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-11722.md) `CVE-2025-11722` · CVE record: ikhodal Woocommerce Category and Products Accordion Panel · CVSS 7.5 High · Not analysed yet · Published 15 Oct 2025 · Tags: File inclusion - [WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion](https://agentprime.io/advisories/CVE-2025-7634.md) `CVE-2025-7634` · CVE record: wptravelengine WP Travel Engine – Tour Booking Plugin – Tour Operator Software · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2025 · Tags: File inclusion - [JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion](https://agentprime.io/advisories/CVE-2025-7721.md) `CVE-2025-7721` · CVE record: beardev JoomSport – for Sports: Team & League, Football, Hockey & more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Oct 2025 · Tags: File inclusion - [Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion](https://agentprime.io/advisories/CVE-2025-9991.md) `CVE-2025-9991` · CVE record: migli Tiny Bootstrap Elements Light · CVSS 8.1 High · Not analysed yet · Published 30 Sept 2025 · Tags: File inclusion - [Bei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-9993.md) `CVE-2025-9993` · CVE record: d3rd4v1d Bei Fen – WordPress Backup Plugin · CVSS 8.1 High · Not analysed yet · Published 30 Sept 2025 · Tags: File inclusion - [WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-60153.md) `CVE-2025-60153` · CVE record: wpshuffle Subscribe To Unlock · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2025 · Tags: File inclusion - [WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-60150.md) `CVE-2025-60150` · CVE record: wpshuffle Subscribe to Download · CVSS 7.5 High · Not analysed yet · Published 26 Sept 2025 · Tags: File inclusion - [WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-60126.md) `CVE-2025-60126` · CVE record: PluginOps Testimonial Slider · CVSS 8.8 High · Not analysed yet · Published 26 Sept 2025 · Tags: File inclusion - [WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-58973.md) `CVE-2025-58973` · CVE record: hashthemes Easy Elementor Addons · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2025 · Tags: File inclusion - [WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-59588.md) `CVE-2025-59588` · CVE record: PenciDesign Soledad · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2025 · Tags: File inclusion - [WordPress Easy Pricing Table WP Plugin <= 1.1.3 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-53450.md) `CVE-2025-53450` · CVE record: Pluginwale Easy Pricing Table WP · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2025 · Tags: File inclusion - [WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-57925.md) `CVE-2025-57925` · CVE record: immonex immonex Kickstart Team · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2025 · Tags: File inclusion - [Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-10143.md) `CVE-2025-10143` · CVE record: catchthemes Catch Dark Mode · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2025 · Tags: File inclusion - [Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-10269.md) `CVE-2025-10269` · CVE record: Theme-Spirit Spirit Framework · CVSS 7.5 High · Not analysed yet · Published 12 Sept 2025 · Tags: File inclusion - [Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion](https://agentprime.io/advisories/CVE-2025-9874.md) `CVE-2025-9874` · CVE record: webcodingplace Ultimate Classified Listings · CVSS 7.5 High · Not analysed yet · Published 11 Sept 2025 · Tags: File inclusion - [WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-58215.md) `CVE-2025-58215` · CVE record: gavias Ziston · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2025 · Tags: File inclusion - [WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54709.md) `CVE-2025-54709` · CVE record: uxper Sala · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2025 · Tags: File inclusion - [WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-47571.md) `CVE-2025-47571` · CVE record: highwarden Super Store Finder · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2025 · Tags: File inclusion - [WordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-47695.md) `CVE-2025-47695` · CVE record: solwin Blog Designer PRO · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2025 · Tags: File inclusion - [WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-58206.md) `CVE-2025-58206` · CVE record: ThemeMove MaxCoach · CVSS 8.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: File inclusion - [WordPress Indutri Theme < 1.3.0 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-58214.md) `CVE-2025-58214` · CVE record: gavias Indutri · CVSS 8.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: File inclusion - [WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-57889.md) `CVE-2025-57889` · CVE record: RealMag777 InPost Gallery · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2025 · Tags: File inclusion - [WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion](https://agentprime.io/advisories/CVE-2025-9990.md) `CVE-2025-9990` · CVE record: smackcoders WordPress Helpdesk Integration · CVSS 8.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: File inclusion - [WordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-58637.md) `CVE-2025-58637` · CVE record: immonex immonex Kickstart · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2025 · Tags: File inclusion - [WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-58608.md) `CVE-2025-58608` · CVE record: BuddyDev MediaPress · CVSS 7.5 High · Not analysed yet · Published 3 Sept 2025 · Tags: File inclusion - [WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-47696.md) `CVE-2025-47696` · CVE record: solwin Blog Designer PRO · CVSS 8.1 High · Not analysed yet · Published 31 Aug 2025 · Tags: File inclusion - [WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2025-54716.md) `CVE-2025-54716` · CVE record: ovatheme Ireca · CVSS 8.1 High · Not analysed yet · Published 28 Aug 2025 · Tags: File inclusion Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .