Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2025-32155 CVE record

CVSS 7.5 High

WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability
- markkinchin Beds24 Online Booking
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32154 CVE record

CVSS 7.5 High

WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability
- Catch Themes Catch Dark Mode
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32153 CVE record

CVSS 7.5 High

WordPress VG WooCarousel plugin <= 1.3 - Local File Inclusion vulnerability
- vinagecko VG WooCarousel
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32152 CVE record

CVSS 7.5 High

WordPress Slider a SlidersPack Plugin <= 2.3 - Local File Inclusion vulnerability
- Essential Plugin Slider a SlidersPack
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32151 CVE record

CVSS 7.5 High

WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability
- Themekraft BuddyForms
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32150 CVE record

CVSS 7.5 High

WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability
- Rameez Iqbal Real Estate Manager
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32146 CVE record

CVSS 8.8 High

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
- JoomSky JS Job Manager
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32142 CVE record

CVSS 8.8 High

WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
- Stylemix Motors
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32141 CVE record

CVSS 8.8 High

WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability
- Stylemix MasterStudy LMS
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-31405 CVE record

CVSS 7.5 High

WordPress Fami WooCommerce Compare plugin <= 1.0.5 - Local File Inclusion vulnerability
- zankover Fami WooCommerce Compare
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-31098 CVE record

CVSS 7.5 High

WordPress DeBounce Email Validator plugin <= 5.7 - Local File Inclusion Vulnerability
- DeBounce Email Validator
- File inclusion
Not analysed yet 3 Apr 2025
CVE-2025-31097 CVE record

CVSS 8.1 High

WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability
- Hossein Material Dashboard
- File inclusion
Not analysed yet 1 Apr 2025
CVE-2025-31082 CVE record

CVSS 8.1 High

WordPress News & Blog Designer Pack plugin <= 4.0 - Local File Inclusion vulnerability
- InfornWeb News & Blog Designer Pack
- File inclusion
Not analysed yet 1 Apr 2025
CVE-2025-30901 CVE record

CVSS 8.1 High

WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability
- JoomSky JS Help Desk
- File inclusion
Not analysed yet 1 Apr 2025
CVE-2025-30870 CVE record

CVSS 8.1 High

WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
- WP Travel Engine
- File inclusion
Not analysed yet 1 Apr 2025
CVE-2025-30849 CVE record

CVSS 8.1 High

WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability
- g5theme Essential Real Estate
- File inclusion
Not analysed yet 1 Apr 2025
CVE-2025-30782 CVE record

CVSS 7.5 High

WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion vulnerability
- WP Shuffle Subscribe to Download Lite
- File inclusion
Not analysed yet 1 Apr 2025
CVE-2025-31387 CVE record

CVSS 7.5 High

WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability
- InstaWP Connect
- File inclusion
Not analysed yet 31 Mar 2025
CVE-2025-31016 CVE record

CVSS 7.5 High

WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability
- Crocoblock JetWooBuilder
- File inclusion
Not analysed yet 31 Mar 2025
CVE-2025-30835 CVE record

CVSS 7.5 High

WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability
- Bastien Ho Accounting for WooCommerce
- File inclusion
Not analysed yet 31 Mar 2025
CVE-2025-31432 CVE record

CVSS 7.5 High

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability
- Pop-Up Chop Chop
- File inclusion
Not analysed yet 28 Mar 2025
CVE-2025-26890 CVE record

CVSS 7.5 High

WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability
- RealMag777 HUSKY
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-26909 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability
- John Darrel Hide My WP Ghost
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30891 CVE record

CVSS 8.8 High

WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability
- magepeopleteam WpTravelly
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30890 CVE record

CVSS 7.5 High

WordPress Login Widget for Ultimate Member plugin <= 1.1.2 - Local File Inclusion vulnerability
- SuitePlugins Login Widget for Ultimate Member
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30871 CVE record

CVSS 7.5 High

WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
- WP Travel Engine
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30868 CVE record

CVSS 7.5 High

WordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability
- Maidul Team Manager
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30846 CVE record

CVSS 8.8 High

WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability
- jetmonsters Restaurant Menu by MotoPress
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30845 CVE record

CVSS 7.5 High

WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability
- webangon The Pack Elementor addons
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30831 CVE record

CVSS 7.5 High

WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability
- themifyme Themify Event Post
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30829 CVE record

CVSS 7.5 High

WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability
- Arraytics WPCafe
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30820 CVE record

CVSS 7.5 High

WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability
- HT Plugins WishSuite
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30814 CVE record

CVSS 7.5 High

WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability
- RadiusTheme The Post Grid
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-30785 CVE record

CVSS 7.5 High

WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion Vulnerability
- WP Shuffle Subscribe to Download Lite
- File inclusion
Not analysed yet 27 Mar 2025
CVE-2025-26986 CVE record

CVSS 8.1 High

WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability
- StylemixThemes Pearl - Corporate Business
- File inclusion
Not analysed yet 26 Mar 2025
CVE-2025-27015 CVE record

CVSS 7.5 High

WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability
- designingmedia Hostiko
- File inclusion
Not analysed yet 26 Mar 2025
CVE-2025-28916 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability
- Rashid Docpro
- File inclusion
Not analysed yet 26 Mar 2025
CVE-2025-24690 CVE record

CVSS 8.1 High

WordPress Formality Plugin <= 1.5.7 - Local File Inclusion vulnerability
- Michele Giorgi Formality
- File inclusion
Not analysed yet 26 Mar 2025
CVE-2025-23952 CVE record

CVSS 8.1 High

WordPress Custom Field List Widget Plugin <= 1.5.1 - Local File Inclusion vulnerability
- ntm custom-field-list-widget
- File inclusion
Not analysed yet 26 Mar 2025
CVE-2025-23937 CVE record

CVSS 8.1 High

WordPress LinkedIn Lite Plugin <= 1.0 - Local File Inclusion vulnerability
- Alex Furr LinkedIn Lite
- File inclusion
Not analysed yet 26 Mar 2025
CVE-2024-13790 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion
- ThemeMove MinimogWP – The High Converting eCommerce WordPress Theme
- File inclusion
Not analysed yet 19 Mar 2025
CVE-2024-12563 CVE record

CVSS 8.8 High

s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode
- WP Sharks s2Member Pro
- File inclusion
Not analysed yet 18 Mar 2025
CVE-2025-26137 CVE record

CVSS 7.5 High

Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=.
- File inclusion
Not analysed yet 18 Mar 2025
CVE-2025-1771 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post
- ShineTheme Travel Booking WordPress Theme
- File inclusion
Not analysed yet 15 Mar 2025
CVE-2025-1707 CVE record

CVSS 8.8 High

Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta
- techlabpro1 Review Schema – Review & Structure Data Schema Plugin
- File inclusion
Not analysed yet 11 Mar 2025
CVE-2024-51319 CVE record

CVSS 7.3 High

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell throu…
- File inclusion
Not analysed yet 11 Mar 2025
CVE-2025-26916 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability
- Pixflow Massive Dynamic
- File inclusion
Not analysed yet 10 Mar 2025
CVE-2025-26933 CVE record

CVSS 7.5 High

WordPress Place Order Without Payment for WooCommerce plugin <= 2.6.7 - Local File Inclusion vulnerability
- Nitin Prakash WC Place Order Without Payment
- File inclusion
Not analysed yet 10 Mar 2025
CVE-2025-27264 CVE record

CVSS 7.5 High

WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability
- Creativeitem Doctor Appointment Booking
- File inclusion
Not analysed yet 3 Mar 2025
CVE-2025-25109 CVE record

CVSS 8.1 High

WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability
- JoomSky WP Vehicle Manager
- File inclusion
Not analysed yet 3 Mar 2025
CVE-2025-23945 CVE record

CVSS 7.5 High

WordPress Popliup Plugin <= 1.1.1 - Local File Inclusion vulnerability
- Webliup Popliup
- File inclusion
Not analysed yet 3 Mar 2025
CVE-2023-49031 CVE record

CVSS 5.1 Medium

Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a cr…
- File inclusion
Not analysed yet 3 Mar 2025
CVE-2024-9193 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update
- creativeon WHMpress - WHMCS WordPress Integration Plugin
- File inclusion
Not analysed yet 28 Feb 2025
CVE-2024-12811 CVE record

CVSS 8.8 High

Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- ShineTheme Travel Booking WordPress Theme
- File inclusion
Not analysed yet 27 Feb 2025
CVE-2025-26979 CVE record

CVSS 7.5 High

WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability
- Aman Funnel Builder by FunnelKit
- File inclusion
Not analysed yet 25 Feb 2025
CVE-2025-26964 CVE record

CVSS 7.5 High

WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability
- Arraytics Eventin
- File inclusion
Not analysed yet 25 Feb 2025
CVE-2025-26957 CVE record

CVSS 7.5 High

WordPress Affiliate Coupons plugin <= 1.7.3 - Local File Inclusion vulnerability
- Deetronix Affiliate Coupons
- File inclusion
Not analysed yet 25 Feb 2025
CVE-2025-26932 CVE record

CVSS 7.5 High

WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability
- QuantumCloud ChatBot
- File inclusion
Not analysed yet 25 Feb 2025
CVE-2025-26985 CVE record

CVSS 8.1 High

WordPress Majestic Support plugin <= 1.0.6 - Local File Inclusion vulnerability
- Majestic Support
- File inclusion
Not analysed yet 25 Feb 2025
CVE-2025-27272 CVE record

CVSS 7.5 High

WordPress VG PostCarousel plugin <= 1.1 - Local File Inclusion vulnerability
- vinagecko VG PostCarousel
- File inclusion
Not analysed yet 24 Feb 2025