# File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress Integro theme <= 1.8.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58895.md)
  `CVE-2025-58895` · CVE record: AncoraThemes Integro · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Good Mood theme <= 1.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58894.md)
  `CVE-2025-58894` · CVE record: axiomthemes Good Mood · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58893.md)
  `CVE-2025-58893` · CVE record: axiomthemes Alright · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Tourimo theme <= 1.2.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58892.md)
  `CVE-2025-58892` · CVE record: AncoraThemes Tourimo · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Sanger theme <= 1.24.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58891.md)
  `CVE-2025-58891` · CVE record: AncoraThemes Sanger · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Playful theme <= 1.19.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58890.md)
  `CVE-2025-58890` · CVE record: AncoraThemes Playful · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58889.md)
  `CVE-2025-58889` · CVE record: axiomthemes Towny · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58888.md)
  `CVE-2025-58888` · CVE record: AncoraThemes The Flash · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58885.md)
  `CVE-2025-58885` · CVE record: AncoraThemes Pathfinder · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58879.md)
  `CVE-2025-58879` · CVE record: AncoraThemes Festy · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58803.md)
  `CVE-2025-58803` · CVE record: axiomthemes Algenix · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58709.md)
  `CVE-2025-58709` · CVE record: axiomthemes Legacy · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58708.md)
  `CVE-2025-58708` · CVE record: axiomthemes 777 · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58706.md)
  `CVE-2025-58706` · CVE record: axiomthemes Woo Hoo · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-58225.md)
  `CVE-2025-58225` · CVE record: axiomthemes Paragon · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53453.md)
  `CVE-2025-53453` · CVE record: axiomthemes Hygia · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53449.md)
  `CVE-2025-53449` · CVE record: axiomthemes Convex · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Rally theme <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53448.md)
  `CVE-2025-53448` · CVE record: axiomthemes Rally · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53447.md)
  `CVE-2025-53447` · CVE record: axiomthemes Assembly · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53446.md)
  `CVE-2025-53446` · CVE record: axiomthemes Beautique · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53445.md)
  `CVE-2025-53445` · CVE record: axiomthemes Catwalk · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53443.md)
  `CVE-2025-53443` · CVE record: axiomthemes Smash · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Rentic theme <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53442.md)
  `CVE-2025-53442` · CVE record: axiomthemes Rentic · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Greeny theme <= 2.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53441.md)
  `CVE-2025-53441` · CVE record: axiomthemes Greeny · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53439.md)
  `CVE-2025-53439` · CVE record: axiomthemes Harper · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress FitLine theme <= 1.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53438.md)
  `CVE-2025-53438` · CVE record: axiomthemes FitLine · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53437.md)
  `CVE-2025-53437` · CVE record: ApusTheme Greenorganic · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53436.md)
  `CVE-2025-53436` · CVE record: BZOTheme Monki · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53435.md)
  `CVE-2025-53435` · CVE record: axiomthemes Plan My Day · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress ChildHope theme <= 1.1.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53434.md)
  `CVE-2025-53434` · CVE record: AncoraThemes ChildHope · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress EasyEat theme <= 1.9.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53433.md)
  `CVE-2025-53433` · CVE record: AncoraThemes EasyEat · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53432.md)
  `CVE-2025-53432` · CVE record: AncoraThemes Echo · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Emberlyn theme <= 1.3.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53431.md)
  `CVE-2025-53431` · CVE record: AncoraThemes Emberlyn · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53430.md)
  `CVE-2025-53430` · CVE record: AncoraThemes Etta · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Exit Game theme <= 1.4.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53429.md)
  `CVE-2025-53429` · CVE record: AncoraThemes Exit Game · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-52768.md)
  `CVE-2025-52768` · CVE record: AncoraThemes Faith & Hope · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-52745.md)
  `CVE-2025-52745` · CVE record: AncoraThemes Farm Agrico · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49943.md)
  `CVE-2025-49943` · CVE record: AncoraThemes Femme · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49942.md)
  `CVE-2025-49942` · CVE record: AncoraThemes Gardis · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49941.md)
  `CVE-2025-49941` · CVE record: AncoraThemes GlamChic · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49371.md)
  `CVE-2025-49371` · CVE record: AncoraThemes Strux · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Lymcoin theme <= 1.3.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49370.md)
  `CVE-2025-49370` · CVE record: AncoraThemes Lymcoin · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49369.md)
  `CVE-2025-49369` · CVE record: AncoraThemes Lettuce · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49368.md)
  `CVE-2025-49368` · CVE record: AncoraThemes Palladio · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49367.md)
  `CVE-2025-49367` · CVE record: AncoraThemes Monyxi · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49366.md)
  `CVE-2025-49366` · CVE record: AncoraThemes Hanani · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49365.md)
  `CVE-2025-49365` · CVE record: AncoraThemes Jack Well · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Ludos Paradise theme <= 2.1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49364.md)
  `CVE-2025-49364` · CVE record: AncoraThemes Ludos Paradise · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49363.md)
  `CVE-2025-49363` · CVE record: AncoraThemes Kings & Queens · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Gracioza theme <= 1.0.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49362.md)
  `CVE-2025-49362` · CVE record: AncoraThemes Gracioza · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Mamita theme <= 1.0.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49361.md)
  `CVE-2025-49361` · CVE record: AncoraThemes Mamita · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Militarology theme <= 1.0.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49360.md)
  `CVE-2025-49360` · CVE record: AncoraThemes Militarology · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress ShieldGroup theme <= 2.13 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-49359.md)
  `CVE-2025-49359` · CVE record: AncoraThemes ShieldGroup · CVSS 8.1 High · Not analysed yet · Published 18 Dec 2025 · Tags: File inclusion
- [WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68068.md)
  `CVE-2025-68068` · CVE record: Select-Themes Stockholm · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2025 · Tags: File inclusion
- [WordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68067.md)
  `CVE-2025-68067` · CVE record: Select-Themes Stockholm Core · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2025 · Tags: File inclusion
- [WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68066.md)
  `CVE-2025-68066` · CVE record: PenciDesign Soledad · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2025 · Tags: File inclusion
- [WordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68065.md)
  `CVE-2025-68065` · CVE record: LiquidThemes Hub Core · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2025 · Tags: File inclusion
- [WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68062.md)
  `CVE-2025-68062` · CVE record: ThemeMove MinimogWP · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2025 · Tags: File inclusion
- [WordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68061.md)
  `CVE-2025-68061` · CVE record: ThemeMove EduMall · CVSS 7.5 High · Not analysed yet · Published 16 Dec 2025 · Tags: File inclusion
- [Extensive VC Addons for WPBakery page builder <= 1.9.1 - Unauthenticated Local File Inclusion via 'shortcode_name' Parameter](https://agentprime.io/advisories/CVE-2025-14475.md)
  `CVE-2025-14475` · CVE record: nenad-obradovic Extensive VC Addons for WPBakery page builder · CVSS 8.1 High · Not analysed yet · Published 13 Dec 2025 · Tags: File inclusion

Newest: <https://agentprime.io/advisories/tag/file-inclusion.md>
Older: <https://agentprime.io/advisories/tag/file-inclusion.md?cursor=WyIyMDI1LTEyLTEzVDA0OjMxOjI0LjUyMjAwMFoiLCJDVkUtMjAyNS0xNDQ3NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=file-inclusion&cursor=WyIyMDI1LTEyLTE4VDA3OjIxOjU0LjAzNzAwMFoiLCJDVkUtMjAyNS01ODg5NiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/file-inclusion/?cursor=WyIyMDI1LTEyLTE4VDA3OjIxOjU0LjAzNzAwMFoiLCJDVkUtMjAyNS01ODg5NiJd>. Everything for agents: <https://agentprime.io/llms.txt>.
