Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2025-47576 CVE record

CVSS 8.8 High

WordPress Bimber - Viral Magazine WordPress Theme theme <= 9.2.5 - Local File Inclusion vulnerability
- Bringthepixel Bimber - Viral Magazine WordPress Theme
- File inclusion
Not analysed yet 19 May 2025
CVE-2025-39507 CVE record

CVSS 7.5 High

WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability
- NasaTheme Nasa Core
- File inclusion
Not analysed yet 16 May 2025
CVE-2025-47693 CVE record

CVSS 7.5 High

WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability
- roninwp FAT Services Booking
- File inclusion
Not analysed yet 16 May 2025
CVE-2025-48136 CVE record

CVSS 7.5 High

WordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability
- Mortgage Calculator Estatik
- File inclusion
Not analysed yet 16 May 2025
CVE-2025-47653 CVE record

CVSS 7.5 High

WordPress WP-Recall <= 16.26.14 - Local File Inclusion Vulnerability
- tggfref WP-Recall
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47531 CVE record

CVSS 7.5 High

WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability
- Xylus Themes XT Event Widget for Social Events
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47510 CVE record

CVSS 7.5 High

WordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability
- fullworks Display Eventbrite Events
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47508 CVE record

CVSS 7.5 High

WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability
- Ruben Garcia GamiPress
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47498 CVE record

CVSS 7.5 High

WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability
- nicdark Hotel Booking
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47496 CVE record

CVSS 7.5 High

WordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability
- PublishPress Authors
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47494 CVE record

CVSS 7.5 High

WordPress EventON plugin <= 2.4.1 - Local File Inclusion Vulnerability
- Ashan Perera EventON
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47440 CVE record

CVSS 7.5 High

WordPress WPAdverts plugin <= 2.2.2 - Local File Inclusion Vulnerability
- Greg Winiarski WPAdverts
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-47439 CVE record

CVSS 7.5 High

WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability
- WP Chill Download Monitor
- File inclusion
Not analysed yet 7 May 2025
CVE-2025-2101 CVE record

CVSS 8.1 High

Edumall <= 4.2.4 - Unauthenticated Local File Inclusion
- ThemeMove EduMall - Professional LMS Education Center WordPress Theme
- File inclusion
Not analysed yet 26 Apr 2025
CVE-2025-32921 CVE record

CVSS 7.5 High

WordPress Arrival theme <= 1.4.5 - Local File Inclusion vulnerability
- wpoperations Arrival
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39359 CVE record

CVSS 7.5 High

WordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerability
- codeworkweb CWW Portfolio
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39360 CVE record

CVSS 7.5 High

WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability
- everestthemes Grace Mag
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39378 CVE record

CVSS 7.5 High

WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability
- Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39379 CVE record

CVSS 7.5 High

WordPress Capturly plugin <= 2.0.1 - Local File Inclusion vulnerability
- Capturly
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39383 CVE record

CVSS 7.5 High

WordPress Xews Lite plugin <= 1.0.9 - Local File Inclusion vulnerability
- codeworkweb Xews Lite
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39384 CVE record

CVSS 7.5 High

WordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerability
- cedcommerce Product Lister for eBay
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39387 CVE record

CVSS 7.5 High

WordPress Opstore theme <= 1.4.5 - Local File Inclusion vulnerability
- wpoperations Opstore
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39391 CVE record

CVSS 7.5 High

WordPress Checkout Field Visibility for WooCommerce plugin <= 1.3.0 - Local File Inclusion vulnerability
- zamartz Checkout Field Visibility for WooCommerce
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-39399 CVE record

CVSS 7.5 High

WordPress License For Envato plugin <= 1.0.0 - Local File Inclusion vulnerability
- Ashraful Sarkar Naiem License For Envato
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-46230 CVE record

CVSS 7.5 High

WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability
- GhozyLab Popup Builder
- File inclusion
Not analysed yet 24 Apr 2025
CVE-2025-0632 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Local File Inclusion (LFI) leading to sensitive data exposure
- Formulatrix Rock Maker Web
- Path traversal
- File inclusion
Not analysed yet 21 Apr 2025
CVE-2025-31030 CVE record

CVSS 7.5 High

WordPress Ray Enterprise Translation plugin <= 1.7.0 - Local File Inclusion via CSRF Vulnerability
- Jiro Sasamoto Ray Enterprise Translation
- File inclusion
Not analysed yet 17 Apr 2025
CVE-2025-39526 CVE record

CVSS 8.1 High

WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability
- nicdark Hotel Booking
- File inclusion
Not analysed yet 17 Apr 2025
CVE-2025-39429 CVE record

CVSS 7.5 High

WordPress Széchenyi 2020 Logo <= 1.1 - Local File Inclusion vulnerability
- Földesi, Mihály Széchenyi 2020 Logo
- File inclusion
Not analysed yet 17 Apr 2025
CVE-2025-39452 CVE record

CVSS 7.5 High

WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability
- Arraytics WPCafe
- File inclusion
Not analysed yet 17 Apr 2025
CVE-2025-39461 CVE record

CVSS 7.5 High

WordPress Docket Cache plugin <= 24.07.02 - Local File Inclusion vulnerability
- Nawawi Jamili Docket Cache
- File inclusion
Not analysed yet 17 Apr 2025
CVE-2025-39462 CVE record

CVSS 7.5 High

WordPress Smart Agreements plugin <= 1.0.3 - Local File Inclusion vulnerability
- teamzt Smart Agreements
- File inclusion
Not analysed yet 17 Apr 2025
CVE-2025-31340 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Wisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP Program
- SUNNET Technology Co., Ltd. Wisdom Master Pro
- File inclusion
Not analysed yet 17 Apr 2025
CVE-2025-39570 CVE record

CVSS 8.8 High

WordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability
- Lomu WPCOM Member
- File inclusion
Not analysed yet 16 Apr 2025
CVE-2025-39584 CVE record

CVSS 7.5 High

WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
- Arraytics Eventin
- File inclusion
Not analysed yet 16 Apr 2025
CVE-2025-39592 CVE record

CVSS 7.5 High

WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion Vulnerability
- WP Shuffle Subscribe to Unlock Lite
- File inclusion
Not analysed yet 16 Apr 2025
CVE-2025-27011 CVE record

CVSS 7.5 High

WordPress Booking and Rental Manager plugin <= 2.2.8 - Local File Inclusion vulnerability
- magepeopleteam Booking and Rental Manager
- File inclusion
Not analysed yet 15 Apr 2025
CVE-2025-26894 CVE record

CVSS 7.5 High

WordPress Coming Soon, Maintenance Mode plugin <= 1.1.1 - Local File Inclusion vulnerability
- Mobeen Abdullah Coming Soon, Maintenance Mode
- File inclusion
Not analysed yet 15 Apr 2025
CVE-2025-26889 CVE record

CVSS 7.5 High

WordPress hockeydata LOS plugin <= 1.2.4 - Local File Inclusion vulnerability
- hockeydata LOS
- File inclusion
Not analysed yet 15 Apr 2025
CVE-2025-32672 CVE record

CVSS 8.1 High

WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability
- g5theme Ultimate Bootstrap Elements for Elementor
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32663 CVE record

CVSS 8.1 High

WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability
- roninwp FAT Cooming Soon
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32656 CVE record

CVSS 8.1 High

WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability
- RadiusTheme Testimonial Slider And Showcase Pro
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32654 CVE record

CVSS 8.1 High

WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
- Stylemix Motors
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32627 CVE record

CVSS 8.1 High

WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
- JoomSky JS Job Manager
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32614 CVE record

CVSS 8.8 High

WordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability
- Ashan Perera EventON
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32589 CVE record

CVSS 8.1 High

WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability
- odude Flexi – Guest Submit
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32577 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability
- hakeemnala Build App Online
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-32519 CVE record

CVSS 8.1 High

WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability
- Foysal Imran IDonate
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-31040 CVE record

CVSS 8.1 High

WordPress WP Food ordering and Restaurant Menu plugin <= 2.7 - Local File Inclusion vulnerability
- Exthemes WP Food ordering and Restaurant Menu
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-31015 CVE record

CVSS 7.5 High

WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability
- Adrian Tobey WordPress SMTP Service, Email Delivery Solved! — MailHawk
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-31014 CVE record

CVSS 7.5 High

WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability
- Hossein Material Dashboard
- File inclusion
Not analysed yet 11 Apr 2025
CVE-2025-22279 CVE record

CVSS 7.5 High

WordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerability
- Crocoblock JetCompareWishlist
- File inclusion
Not analysed yet 10 Apr 2025
CVE-2025-32160 CVE record

CVSS 7.5 High

WordPress EventON plugin <= 2.4.1 - Local File Inclusion vulnerability
- Ashan Perera EventON
- File inclusion
Not analysed yet 10 Apr 2025
CVE-2025-32158 CVE record

CVSS 7.5 High

WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability
- Syed Balkhi aThemes Addons for Elementor
- File inclusion
Not analysed yet 10 Apr 2025
CVE-2025-32668 CVE record

CVSS 8.1 High

WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability
- Rameez Iqbal Real Estate Manager
- File inclusion
Not analysed yet 10 Apr 2025
CVE-2025-32499 CVE record

CVSS 6.5 Medium

WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability
- wpWax Logo Showcase Ultimate
- File inclusion
Not analysed yet 9 Apr 2025
CVE-2025-32692 CVE record

CVSS 7.5 High

WordPress WP Subscription Forms plugin <= 1.2.4 - Local File Inclusion Vulnerability
- WP Shuffle WP Subscription Forms
- File inclusion
Not analysed yet 9 Apr 2025
CVE-2025-32159 CVE record

CVSS 7.5 High

WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability
- RadiusTheme Radius Blocks
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32157 CVE record

CVSS 7.5 High

WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability
- Jakub Glos Sparkle Elementor Kit
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-32156 CVE record

CVSS 7.5 High

WordPress Just Post Preview Widget plugin <= 1.1.1 - Local File Inclusion vulnerability
- Alex Prokopenko / JustCoded Just Post Preview Widget
- File inclusion
Not analysed yet 4 Apr 2025