# File inclusion. A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WordPress Spirit Framework plugin <= 1.2.13 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2024-54263.md) `CVE-2024-54263` · CVE record: Talemy Spirit Framework · CVSS 7.5 High · Not analysed yet · Published 2 Feb 2026 · Tags: File inclusion - [Gila CMS < 2.0.0 - Remote Code Execution](https://agentprime.io/advisories/CVE-2021-47900.md) `CVE-2021-47900` · CVE record: Gila CMS Gila CMS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jan 2026 · Tags: File inclusion - [Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-1257.md) `CVE-2026-1257` · CVE record: shazdeh Administrative Shortcodes · CVSS 7.5 High · Not analysed yet · Published 24 Jan 2026 · Tags: File inclusion - [WordPress EduBlink Core plugin <= 2.0.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-24635.md) `CVE-2026-24635` · CVE record: DevsBlink EduBlink Core · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: File inclusion - [WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-24609.md) `CVE-2026-24609` · CVE record: Elated-Themes Laurent · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: File inclusion - [WordPress Laurent Core plugin <= 2.4.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-24608.md) `CVE-2026-24608` · CVE record: Elated-Themes Laurent Core · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: File inclusion - [WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-24538.md) `CVE-2026-24538` · CVE record: omnipressteam Omnipress · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: File inclusion - [WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-24531.md) `CVE-2026-24531` · CVE record: Select-Themes Prowess · CVSS 7.5 High · Not analysed yet · Published 23 Jan 2026 · Tags: File inclusion - [WordPress Kentha Elementor Widgets plugin < 3.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-24390.md) `CVE-2026-24390` · CVE record: QantumThemes Kentha Elementor Widgets · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Gyan Elements plugin <= 2.2.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-23978.md) `CVE-2026-23978` · CVE record: Softwebmedia Gyan Elements · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-23975.md) `CVE-2026-23975` · CVE record: uxper Golo · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22464.md) `CVE-2026-22464` · CVE record: wphocus My auctions allegro · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Triply theme <= 2.4.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22402.md) `CVE-2026-22402` · CVE record: pavothemes Triply · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Freshio theme <= 2.4.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22401.md) `CVE-2026-22401` · CVE record: pavothemes Freshio · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69314.md) `CVE-2025-69314` · CVE record: fuelthemes Werkstatt · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress North theme <= 5.7.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69100.md) `CVE-2025-69100` · CVE record: fuelthemes North · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Malta theme <= 1.3.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69078.md) `CVE-2025-69078` · CVE record: AncoraThemes Malta · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Hobo theme <= 1.0.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69077.md) `CVE-2025-69077` · CVE record: AncoraThemes Hobo · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Modern Housewife theme <= 1.0.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69076.md) `CVE-2025-69076` · CVE record: AncoraThemes Modern Housewife · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Yolox theme <= 1.0.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69075.md) `CVE-2025-69075` · CVE record: AncoraThemes Yolox · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Pearson Specter theme <= 1.11.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69074.md) `CVE-2025-69074` · CVE record: AncoraThemes Pearson Specter · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Piqes theme <= 1.0.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69073.md) `CVE-2025-69073` · CVE record: AncoraThemes Piqes · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Prider theme <= 1.1.3.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69072.md) `CVE-2025-69072` · CVE record: AncoraThemes Prider · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress TanTum theme <= 1.1.13 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69071.md) `CVE-2025-69071` · CVE record: AncoraThemes TanTum · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69070.md) `CVE-2025-69070` · CVE record: AncoraThemes Tornados · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Muji theme <= 1.2.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69068.md) `CVE-2025-69068` · CVE record: AncoraThemes Muji · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Tails theme <= 1.4.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69067.md) `CVE-2025-69067` · CVE record: AncoraThemes Tails · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Indoor Plants theme <= 1.2.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69066.md) `CVE-2025-69066` · CVE record: AncoraThemes Indoor Plants · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Snow Mountain theme <= 1.4.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69065.md) `CVE-2025-69065` · CVE record: AncoraThemes Snow Mountain · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Pets Land theme <= 1.2.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69064.md) `CVE-2025-69064` · CVE record: AncoraThemes Pets Land · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Weedles theme <= 1.1.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69062.md) `CVE-2025-69062` · CVE record: AncoraThemes Weedles · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress MoveMe theme <= 1.2.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69061.md) `CVE-2025-69061` · CVE record: AncoraThemes MoveMe · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress uReach theme <= 1.3.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69060.md) `CVE-2025-69060` · CVE record: AncoraThemes uReach · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress DiveIt theme <= 1.4.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69059.md) `CVE-2025-69059` · CVE record: AncoraThemes DiveIt · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress PartyMaker theme <= 1.1.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69058.md) `CVE-2025-69058` · CVE record: AncoraThemes PartyMaker · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69057.md) `CVE-2025-69057` · CVE record: Edge-Themes Eldon · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69050.md) `CVE-2025-69050` · CVE record: Edge-Themes Overworld · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Töbel theme <= 1.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69049.md) `CVE-2025-69049` · CVE record: Elated-Themes Töbel · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69047.md) `CVE-2025-69047` · CVE record: magentech MaxShop · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69046.md) `CVE-2025-69046` · CVE record: WebGeniusLab iRecco Core · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Vango theme <= 1.3.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69044.md) `CVE-2025-69044` · CVE record: goalthemes Vango · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69043.md) `CVE-2025-69043` · CVE record: goalthemes Rashy · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Lindo theme <= 1.2.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69042.md) `CVE-2025-69042` · CVE record: goalthemes Lindo · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69041.md) `CVE-2025-69041` · CVE record: goalthemes Dekoro · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69040.md) `CVE-2025-69040` · CVE record: goalthemes Bfres · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69039.md) `CVE-2025-69039` · CVE record: goalthemes Bailly · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69038.md) `CVE-2025-69038` · CVE record: goalthemes Hyori · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69037.md) `CVE-2025-69037` · CVE record: goalthemes Pippo · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Search & Go theme <= 2.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69005.md) `CVE-2025-69005` · CVE record: Elated-Themes Search & Go · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Bajaar - Highly Customizable WooCommerce WordPress Theme theme <= 2.1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69004.md) `CVE-2025-69004` · CVE record: XpeedStudio Bajaar - Highly Customizable WooCommerce WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68913.md) `CVE-2025-68913` · CVE record: zozothemes Miion · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Barberry theme <= 2.9.9.87 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68908.md) `CVE-2025-68908` · CVE record: temash Barberry · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68905.md) `CVE-2025-68905` · CVE record: jegtheme JNews - Pay Writer · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-68510.md) `CVE-2025-68510` · CVE record: ThemeGoods Photography · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-67957.md) `CVE-2025-67957` · CVE record: TangibleWP Listivo Core · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-67955.md) `CVE-2025-67955` · CVE record: TangibleWP MyHome Core · CVSS 7.5 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-67946.md) `CVE-2025-67946` · CVE record: scriptsbundle AdForest · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress The Aisle theme < 2.9.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-67941.md) `CVE-2025-67941` · CVE record: Elated-Themes The Aisle · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-67940.md) `CVE-2025-67940` · CVE record: Mikado-Themes Powerlift · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion - [WordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-67938.md) `CVE-2025-67938` · CVE record: Mikado-Themes Biagiotti · CVSS 8.1 High · Not analysed yet · Published 22 Jan 2026 · Tags: File inclusion Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .