# File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27341.md)
  `CVE-2026-27341` · CVE record: Mikado-Themes TopScorer - Sports WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Apollo | Night Club, DJ Event WordPress Theme theme <= 1.3.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27340.md)
  `CVE-2026-27340` · CVE record: AncoraThemes Apollo | Night Club, DJ Event WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27339.md)
  `CVE-2026-27339` · CVE record: AncoraThemes Buzz Stone | Magazine & Viral Blog WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27337.md)
  `CVE-2026-27337` · CVE record: AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Consultor | Consulting, Accounting & Legal Counsel WordPress Theme theme <= 1.2.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27336.md)
  `CVE-2026-27336` · CVE record: AncoraThemes Consultor | Consulting, Accounting & Legal Counsel WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme <= 1.0.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27335.md)
  `CVE-2026-27335` · CVE record: AncoraThemes Ekoterra - NonProfit, Green Energy & Ecology Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Alchemists theme <= 4.6.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27334.md)
  `CVE-2026-27334` · CVE record: dan_fisher Alchemists · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27326.md)
  `CVE-2026-27326` · CVE record: axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress CasaMia | Property Rental Real Estate WordPress Theme theme <= 1.1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-27097.md)
  `CVE-2026-27097` · CVE record: AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-23801.md)
  `CVE-2026-23801` · CVE record: fuelthemes The Issue · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress FindAll theme <= 1.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22478.md)
  `CVE-2026-22478` · CVE record: Elated-Themes FindAll · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Felizia theme <= 1.3.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22477.md)
  `CVE-2026-22477` · CVE record: AncoraThemes Felizia · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Etchy theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22476.md)
  `CVE-2026-22476` · CVE record: Elated-Themes Etchy · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22457.md)
  `CVE-2026-22457` · CVE record: Mikado-Themes Wanderland · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Askka theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22456.md)
  `CVE-2026-22456` · CVE record: Elated-Themes Askka · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Hoverex theme <= 1.5.10 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22452.md)
  `CVE-2026-22452` · CVE record: ThemeREX Hoverex · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22449.md)
  `CVE-2026-22449` · CVE record: Select-Themes Don Peppe · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22446.md)
  `CVE-2026-22446` · CVE record: Select-Themes Prowess · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22443.md)
  `CVE-2026-22443` · CVE record: ThemeREX Alliance · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Tribe theme <= 1.7.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22442.md)
  `CVE-2026-22442` · CVE record: LaunchandSell Tribe · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22441.md)
  `CVE-2026-22441` · CVE record: Elated-Themes Zentrum · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22439.md)
  `CVE-2026-22439` · CVE record: AncoraThemes Green Planet · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22437.md)
  `CVE-2026-22437` · CVE record: AncoraThemes Playa · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Helvig theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22436.md)
  `CVE-2026-22436` · CVE record: Elated-Themes Helvig · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22435.md)
  `CVE-2026-22435` · CVE record: AncoraThemes ElectroServ · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22434.md)
  `CVE-2026-22434` · CVE record: AncoraThemes Crown Art · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22433.md)
  `CVE-2026-22433` · CVE record: AncoraThemes CloudMe · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Woopy theme <= 1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22432.md)
  `CVE-2026-22432` · CVE record: AncoraThemes Woopy · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Wabi-Sabi theme <= 1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22431.md)
  `CVE-2026-22431` · CVE record: AncoraThemes Wabi-Sabi · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22429.md)
  `CVE-2026-22429` · CVE record: Mikado-Themes Verdure · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Tooth Fairy theme <= 1.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22428.md)
  `CVE-2026-22428` · CVE record: AncoraThemes Tooth Fairy · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22427.md)
  `CVE-2026-22427` · CVE record: Mikado-Themes GoTravel · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Sweet Jane theme <= 1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22425.md)
  `CVE-2026-22425` · CVE record: Elated-Themes Sweet Jane · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Shaha theme <= 1.1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22424.md)
  `CVE-2026-22424` · CVE record: AncoraThemes Shaha · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22423.md)
  `CVE-2026-22423` · CVE record: Select-Themes SetSail · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Quantum theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22421.md)
  `CVE-2026-22421` · CVE record: AncoraThemes Quantum · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Horizon theme <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22420.md)
  `CVE-2026-22420` · CVE record: AncoraThemes Horizon · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Honor theme <= 2.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22419.md)
  `CVE-2026-22419` · CVE record: AncoraThemes Honor · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22418.md)
  `CVE-2026-22418` · CVE record: AncoraThemes Great Lotus · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress FixTeam theme <= 1.5.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22416.md)
  `CVE-2026-22416` · CVE record: AncoraThemes FixTeam · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22415.md)
  `CVE-2026-22415` · CVE record: AncoraThemes The Mounty · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22414.md)
  `CVE-2026-22414` · CVE record: Mikado-Themes Marra · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22413.md)
  `CVE-2026-22413` · CVE record: Mikado-Themes Malgré · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22412.md)
  `CVE-2026-22412` · CVE record: Mikado-Themes Eona · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22410.md)
  `CVE-2026-22410` · CVE record: Mikado-Themes Dolcino · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22408.md)
  `CVE-2026-22408` · CVE record: Mikado-Themes Justicia · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22405.md)
  `CVE-2026-22405` · CVE record: Mikado-Themes Overton · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22403.md)
  `CVE-2026-22403` · CVE record: Mikado-Themes Innovio · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Holmes theme <= 1.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22399.md)
  `CVE-2026-22399` · CVE record: Mikado-Themes Holmes · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22397.md)
  `CVE-2026-22397` · CVE record: Mikado-Themes Fleur · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22395.md)
  `CVE-2026-22395` · CVE record: Mikado-Themes Fiorello · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Evently theme <= 1.7 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22394.md)
  `CVE-2026-22394` · CVE record: Mikado-Themes Evently · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Cortex theme <= 1.9 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22392.md)
  `CVE-2026-22392` · CVE record: Mikado-Themes Cortex · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Cocco theme <= 2.0 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22389.md)
  `CVE-2026-22389` · CVE record: Mikado-Themes Cocco · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Aviana theme <= 2.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22387.md)
  `CVE-2026-22387` · CVE record: Mikado-Themes Aviana · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Wolmart theme <= 1.9.6 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22385.md)
  `CVE-2026-22385` · CVE record: don-themes Wolmart · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Molla theme <= 1.5.16 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69339.md)
  `CVE-2025-69339` · CVE record: don-themes Molla · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Remons theme <= 1.3.4 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-69090.md)
  `CVE-2025-69090` · CVE record: ovatheme Remons · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress Berger theme <= 1.1.1 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2025-53335.md)
  `CVE-2025-53335` · CVE record: ThemeREX Berger · CVSS 8.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: File inclusion
- [WordPress PawFriends - Pet Shop and Veterinary WordPress Theme theme <= 1.3 - Local File Inclusion vulnerability](https://agentprime.io/advisories/CVE-2026-22381.md)
  `CVE-2026-22381` · CVE record: Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme · CVSS 8.1 High · Not analysed yet · Published 20 Feb 2026 · Tags: File inclusion

Newest: <https://agentprime.io/advisories/tag/file-inclusion.md>
Older: <https://agentprime.io/advisories/tag/file-inclusion.md?cursor=WyIyMDI2LTAyLTIwVDE1OjQ3OjA2LjcwODAwMFoiLCJDVkUtMjAyNi0yMjM4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=file-inclusion&cursor=WyIyMDI2LTAzLTA1VDA1OjUzOjUyLjk0NDAwMFoiLCJDVkUtMjAyNi0yNzM0MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/file-inclusion/?cursor=WyIyMDI2LTAzLTA1VDA1OjUzOjUyLjk0NDAwMFoiLCJDVkUtMjAyNi0yNzM0MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.