Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2023-25999 CVE record

CVSS 8.1 High

WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability
- snstheme BodyCenter - Gym, Fitness WooCommerce WordPress Theme
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2023-26005 CVE record

CVSS 8.1 High

WordPress Fitrush <= 1.3.4 - Local File Inclusion Vulnerability
- BZOTheme Fitrush
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-24768 CVE record

CVSS 8.1 High

WordPress Nitan theme <= 2.9 - Local File Inclusion Vulnerability
- snstheme Nitan
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-24770 CVE record

CVSS 8.1 High

WordPress CraftXtore theme <= 1.7 - Local File Inclusion Vulnerability
- BZOTheme CraftXtore
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-26592 CVE record

CVSS 8.1 High

WordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability
- axiomthemes Lab
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-27362 CVE record

CVSS 8.1 High

WordPress Petito theme < 1.6.6 - Local File Inclusion vulnerability
- BZOTheme Petito
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-28888 CVE record

CVSS 8.1 High

WordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability
- BZOTheme GiftXtore
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-28944 CVE record

CVSS 8.1 High

WordPress Avaz theme <= 2.8 - Local File Inclusion Vulnerability
- snstheme Avaz
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-28945 CVE record

CVSS 8.1 High

WordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability
- snstheme Valen - Sport, Fashion WooCommerce WordPress Theme
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-28992 CVE record

CVSS 8.1 High

WordPress SNS Anton theme <= 4.1 - Local File Inclusion Vulnerability
- snstheme SNS Anton
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-32595 CVE record

CVSS 8.1 High

WordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability
- gavias Krowd
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-39476 CVE record

CVSS 7.5 High

WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability
- magentech Revo
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-48125 CVE record

CVSS 8.1 High

WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability
- WP Event Manager
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-48126 CVE record

CVSS 8.1 High

WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability
- g5theme Essential Real Estate
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49275 CVE record

CVSS 8.1 High

WordPress Blogbyte theme <= 1.1.1 - Local File Inclusion Vulnerability
- unfoldwp Blogbyte
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49276 CVE record

CVSS 8.1 High

WordPress Blogmine theme <= 1.1.7 - Local File Inclusion Vulnerability
- unfoldwp Blogmine
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49277 CVE record

CVSS 8.1 High

WordPress Blogprise theme <= 1.0.9 - Local File Inclusion Vulnerability
- unfoldwp Blogprise
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49278 CVE record

CVSS 8.1 High

WordPress Blogty theme <= 1.0.11 - Local File Inclusion Vulnerability
- unfoldwp Blogty
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49279 CVE record

CVSS 8.1 High

WordPress Blogvy theme <= 1.0.7 - Local File Inclusion Vulnerability
- unfoldwp Blogvy
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49280 CVE record

CVSS 8.1 High

WordPress Magty theme <= 1.0.6 - Local File Inclusion Vulnerability
- unfoldwp Magty
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49281 CVE record

CVSS 8.1 High

WordPress Magways theme <= 1.2.1 - Local File Inclusion Vulnerability
- unfoldwp Magways
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2025-49282 CVE record

CVSS 8.1 High

WordPress Magze theme <= 1.0.9 - Local File Inclusion Vulnerability
- unfoldwp Magze
- File inclusion
Not analysed yet 9 Jun 2025
CVE-2023-25995 CVE record

CVSS 7.5 High

WordPress AI Mortgage Calculator <= 1.0.1 - Local File Inclusion Vulnerability
- choicehomemortgage AI Mortgage Calculator
- File inclusion
Not analysed yet 6 Jun 2025
CVE-2025-30999 CVE record

CVSS 7.5 High

WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability
- Fahad Mahmood External Store for Shopify
- File inclusion
Not analysed yet 6 Jun 2025
CVE-2025-49313 CVE record

CVSS 7.5 High

WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability
- ovatheme BRW
- File inclusion
Not analysed yet 6 Jun 2025
CVE-2025-49308 CVE record

CVSS 7.5 High

WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability
- WP Travel Engine
- File inclusion
Not analysed yet 6 Jun 2025
CVE-2025-49307 CVE record

CVSS 7.5 High

WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability
- Magazine3 WP Multilang
- File inclusion
Not analysed yet 6 Jun 2025
CVE-2025-47586 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability
- StylemixThemes Motors - Events
- File inclusion
Not analysed yet 6 Jun 2025
CVE-2024-40112 CVE record

CVSS 5.9 Medium

A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie to include arbitrary…
- File inclusion
Not analysed yet 2 Jun 2025
CVE-2025-31060 CVE record

CVSS 8.1 High

WordPress Capie theme <= 1.0.40 - Local File Inclusion Vulnerability
- ApusTheme Capie
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-31064 CVE record

CVSS 8.1 High

WordPress Vizeon theme < 1.2.1 - Local File Inclusion vulnerability
- gavias Vizeon - Business Consulting
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-31632 CVE record

CVSS 8.1 High

WordPress La Boom <= 2.7 - Local File Inclusion Vulnerability
- SpyroPress La Boom
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-31633 CVE record

CVSS 8.1 High

WordPress Kiamo - Responsive Business Service WordPress Theme <= 1.3.3 - Local File Inclusion Vulnerability
- gavias Kiamo - Responsive Business Service WordPress Theme
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-31912 CVE record

CVSS 8.1 High

WordPress Enzio - Responsive Business WordPress Theme theme < 1.2.6 - Local File Inclusion vulnerability
- gavias Enzio - Responsive Business WordPress Theme
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-31913 CVE record

CVSS 8.1 High

WordPress Ogami theme <= 1.53 - Local File Inclusion Vulnerability
- ApusTheme Ogami
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-32286 CVE record

CVSS 8.1 High

WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability
- ApusTheme Butcher
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-32289 CVE record

CVSS 8.1 High

WordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability
- ApusTheme Yozi
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-32294 CVE record

CVSS 8.1 High

WordPress Oxpitan theme <= 1.3.5 - Local File Inclusion Vulnerability
- gavias Oxpitan
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-32302 CVE record

CVSS 8.1 High

WordPress Winnex theme <= 1.3.2 - Local File Inclusion Vulnerability
- gavias Winnex
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-32309 CVE record

CVSS 8.1 High

WordPress Healsoul theme <= 2.2.3 - Local File Inclusion Vulnerability
- ThemeMove Healsoul
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-39490 CVE record

CVSS 8.1 High

WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability
- Mikado-Themes Backpack Traveler
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-39494 CVE record

CVSS 8.1 High

WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability
- Mikado-Themes Wilmër
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-39506 CVE record

CVSS 8.1 High

WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability
- NasaTheme Nasa Core
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-46444 CVE record

CVSS 8.1 High

WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability
- scripteo Ads Pro
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-46454 CVE record

CVSS 7.5 High

WordPress Meta Keywords & Description plugin <= 0.8 - Local File Inclusion Vulnerability
- svil4ok Meta Keywords & Description
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-46468 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Fable Extra plugin <= 1.0.6 - Local File Inclusion Vulnerability
- WPFable Fable Extra
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-46474 CVE record

CVSS 8.1 High

WordPress SEUR Oficial plugin <= 2.2.23 - Local File Inclusion Vulnerability
- SEUR Oficial
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-47438 CVE record

CVSS 8.1 High

WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability
- wpjobportal WP Job Portal
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-47453 CVE record

CVSS 8.1 High

WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability
- Xylus Themes WP Smart Import
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-47670 CVE record

CVSS 8.1 High

WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability
- miniOrange WordPress Social Login and Register
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-47672 CVE record

CVSS 8.1 High

WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability
- miniOrange Discord Integration
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-48292 CVE record

CVSS 8.1 High

WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability
- GoodLayers Tourmaster
- File inclusion
Not analysed yet 23 May 2025
CVE-2025-25539 CVE record

CVSS 6.5 Medium

Local File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain sensitive information via help menu.
- File inclusion
Not analysed yet 21 May 2025
CVE-2025-32925 CVE record

CVSS 8.3 High

WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability
- FantasticPlugins SUMO Reward Points
- File inclusion
Not analysed yet 19 May 2025
CVE-2025-39406 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability
- mojoomla WPAMS
- File inclusion
Not analysed yet 19 May 2025
CVE-2025-39411 CVE record

CVSS 7.5 High

WordPress WhatsApp Click to Chat Plugin for WordPress plugin <= 2.2.12 - Local File Inclusion vulnerability
- Indie_Plugins WhatsApp Click to Chat Plugin for WordPress
- File inclusion
Not analysed yet 19 May 2025
CVE-2025-39458 CVE record

CVSS 8.1 High

WordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability
- Mikado-Themes Foton
- File inclusion
Not analysed yet 19 May 2025
CVE-2025-26735 CVE record

CVSS 7.5 High

WordPress Grip theme <= 1.0.9 - Local File Inclusion vulnerability
- Candid themes Grip
- File inclusion
Not analysed yet 19 May 2025
CVE-2025-39396 CVE record

CVSS 7.5 High

WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability
- Crocoblock JetReviews
- File inclusion
Not analysed yet 19 May 2025
CVE-2025-39364 CVE record

CVSS 7.5 High

WordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerability
- PluginEver Product Category Slider for WooCommerce
- File inclusion
Not analysed yet 19 May 2025