# File inclusion. A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [WordPress M.Williamson theme <= 1.2.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28055.md) `CVE-2026-28055` · CVE record: ThemeREX M.Williamson · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Legal Stone theme <= 1.2.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28054.md) `CVE-2026-28054` · CVE record: ThemeREX Legal Stone · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28053.md) `CVE-2026-28053` · CVE record: ThemeREX Miller · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Peter Mason theme <= 1.4.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28052.md) `CVE-2026-28052` · CVE record: ThemeREX Peter Mason · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Yacht Rental theme <= 2.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28051.md) `CVE-2026-28051` · CVE record: ThemeREX Yacht Rental · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Beacon theme <= 2.24 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28050.md) `CVE-2026-28050` · CVE record: ThemeREX Beacon · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Police Department theme <= 2.17 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28049.md) `CVE-2026-28049` · CVE record: ThemeREX Police Department · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress FlashMart theme <= 2.0.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28048.md) `CVE-2026-28048` · CVE record: magentech FlashMart · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Victo theme <= 1.4.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28047.md) `CVE-2026-28047` · CVE record: magentech Victo · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Law Office theme <= 3.3.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28046.md) `CVE-2026-28046` · CVE record: ThemeREX Law Office · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress N7 | Golf Club Sports & Events theme <= 2.16.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28045.md) `CVE-2026-28045` · CVE record: ThemeREX N7 | Golf Club Sports & Events · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme <= 1.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28043.md) `CVE-2026-28043` · CVE record: ThemeREX Healer - Doctor, Clinic & Medical WordPress Theme · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28041.md) `CVE-2026-28041` · CVE record: AncoraThemes Grit · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28039.md) `CVE-2026-28039` · CVE record: TMS wpDataTables · CVSS 7.5 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Printy theme <= 1.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28035.md) `CVE-2026-28035` · CVE record: ThemeREX Printy · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28034.md) `CVE-2026-28034` · CVE record: ThemeREX Progress · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Edifice theme <= 1.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28033.md) `CVE-2026-28033` · CVE record: ThemeREX Edifice · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Tuning theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28032.md) `CVE-2026-28032` · CVE record: ThemeREX Tuning · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Invetex theme <= 2.18 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28031.md) `CVE-2026-28031` · CVE record: ThemeREX Invetex · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Bonbon theme <= 1.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28030.md) `CVE-2026-28030` · CVE record: ThemeREX Bonbon · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress EmojiNation theme <= 1.0.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28029.md) `CVE-2026-28029` · CVE record: ThemeREX EmojiNation · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress MoneyFlow theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28028.md) `CVE-2026-28028` · CVE record: ThemeREX MoneyFlow · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Kayon theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28027.md) `CVE-2026-28027` · CVE record: ThemeREX Kayon · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Motorix theme <= 1.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28026.md) `CVE-2026-28026` · CVE record: ThemeREX Motorix · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Stargaze theme <= 1.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28025.md) `CVE-2026-28025` · CVE record: ThemeREX Stargaze · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28024.md) `CVE-2026-28024` · CVE record: axiomthemes Helion · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Nuts theme <= 1.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28023.md) `CVE-2026-28023` · CVE record: ThemeREX Nuts · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Foodie theme <= 1.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28022.md) `CVE-2026-28022` · CVE record: ThemeREX Foodie · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Craftis theme <= 1.2.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28021.md) `CVE-2026-28021` · CVE record: ThemeREX Craftis · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Chroma theme <= 1.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28020.md) `CVE-2026-28020` · CVE record: ThemeREX Chroma · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Manoir theme <= 1.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28019.md) `CVE-2026-28019` · CVE record: ThemeREX Manoir · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Global Logistics theme <= 3.20 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28018.md) `CVE-2026-28018` · CVE record: ThemeREX Global Logistics · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Green Thumb theme <= 1.1.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28017.md) `CVE-2026-28017` · CVE record: ThemeREX Green Thumb · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Luxury Wine theme <= 1.1.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28016.md) `CVE-2026-28016` · CVE record: ThemeREX Luxury Wine · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress ShiftCV theme <= 3.0.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28015.md) `CVE-2026-28015` · CVE record: ThemeREX ShiftCV · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Translogic theme <= 1.2.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28014.md) `CVE-2026-28014` · CVE record: ThemeREX Translogic · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Kratz theme <= 1.0.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28013.md) `CVE-2026-28013` · CVE record: ThemeREX Kratz · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Gridiron theme <= 1.0.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28012.md) `CVE-2026-28012` · CVE record: ThemeREX Gridiron · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Yottis theme <= 1.0.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28011.md) `CVE-2026-28011` · CVE record: ThemeREX Yottis · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Scientia theme <= 1.2.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28010.md) `CVE-2026-28010` · CVE record: ThemeREX Scientia · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress DroneX theme <= 1.1.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28009.md) `CVE-2026-28009` · CVE record: ThemeREX DroneX · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Coinpress theme <= 1.0.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28007.md) `CVE-2026-28007` · CVE record: ThemeREX Coinpress · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Yungen theme <= 1.0.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-28006.md) `CVE-2026-28006` · CVE record: ThemeREX Yungen · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Vixus theme <= 1.0.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27998.md) `CVE-2026-27998` · CVE record: ThemeREX Vixus · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Maxify theme <= 1.0.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27997.md) `CVE-2026-27997` · CVE record: ThemeREX Maxify · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Lingvico theme <= 1.0.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27996.md) `CVE-2026-27996` · CVE record: ThemeREX Lingvico · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27995.md) `CVE-2026-27995` · CVE record: ThemeREX Justitia · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27994.md) `CVE-2026-27994` · CVE record: ThemeREX Tediss · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Aldo theme <= 1.0.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27993.md) `CVE-2026-27993` · CVE record: ThemeREX Aldo · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Meals & Wheels theme <= 1.1.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27992.md) `CVE-2026-27992` · CVE record: ThemeREX Meals & Wheels · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Avventure theme <= 1.1.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27991.md) `CVE-2026-27991` · CVE record: ThemeREX Avventure · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress ConFix theme <= 1.013 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27990.md) `CVE-2026-27990` · CVE record: ThemeREX ConFix · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Quanzo theme <= 1.0.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27989.md) `CVE-2026-27989` · CVE record: ThemeREX Quanzo · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Equadio theme <= 1.1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27988.md) `CVE-2026-27988` · CVE record: ThemeREX Equadio · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress The Qlean theme <= 2.12 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27987.md) `CVE-2026-27987` · CVE record: ThemeREX The Qlean · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress OsTende theme <= 1.4.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27986.md) `CVE-2026-27986` · CVE record: ThemeREX OsTende · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Humanum theme <= 1.1.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27985.md) `CVE-2026-27985` · CVE record: ThemeREX Humanum · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27383.md) `CVE-2026-27383` · CVE record: RadiusTheme Metro · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27381.md) `CVE-2026-27381` · CVE record: thembay Aora · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion - [WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27342.md) `CVE-2026-27342` · CVE record: Mikado-Themes TopFit - Fitness and Gym WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .