Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2025-6991 CVE record

CVSS 7.5 High

Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion
- hogash KALLYAS - Creative eCommerce Multi-Purpose WordPress Theme
- File inclusion
Not analysed yet 26 Jul 2025
librenms/librenms Packagist

CVSS 7.5 High

LibreNMS has Authenticated Remote File Inclusion in ajax_form.php that Allows RCE
- File inclusion
<25.7.0 · fixed in 25.7.0

GHSA-gq96-8w38-hhj2 · CVE-2025-54138 Not analysed yet 21 Jul 2025
dolibarr/dolibarr Packagist

CVSS 8.8 High

Dolibarr has Remote Code Execution Vulnerability (Bypass)
- File inclusion
<=21.0.2 · no fixed version yet

GHSA-49xw-hw94-fmv2 Not analysed yet 21 Jul 2025
CVE-2025-24937 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Access to local file system and its content
- Nokia WaveSuite NOC
- File inclusion
Not analysed yet 21 Jul 2025
CVE-2015-10133 CVE record

CVSS 7.2 High

Subscribe to Comments <= 2.1.2 - Local File Includion
- markjaquith Subscribe to Comments
- File inclusion
Not analysed yet 19 Jul 2025
CVE-2025-54015 CVE record

CVSS 6.6 Medium

WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability
- HT Plugins HT Contact Form 7
- File inclusion
Not analysed yet 16 Jul 2025
CVE-2025-6746 CVE record

CVSS 8.8 High

WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion
- xTemos Woodmart
- File inclusion
Not analysed yet 8 Jul 2025
CVE-2025-7327 CVE record

CVSS 8.8 High

Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
- techlabpro1 Widget for Google Reviews
- File inclusion
Not analysed yet 8 Jul 2025
CVE-2025-47627 CVE record

CVSS 7.5 High

WordPress PrivateContent - Mail Actions plugin <= 2.3.2 - Local File Inclusion vulnerability
- LCweb PrivateContent - Mail Actions
- File inclusion
Not analysed yet 4 Jul 2025
CVE-2025-52807 CVE record

CVSS 8.1 High

WordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability
- ApusWP Kossy - Minimalist eCommerce WordPress Theme
- File inclusion
Not analysed yet 4 Jul 2025
CVE-2025-4414 CVE record

CVSS 8.1 High

WordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability
- CMSMasters Content Composer
- File inclusion
Not analysed yet 4 Jul 2025
CVE-2025-49070 CVE record

CVSS 7.5 High

WordPress Elessi < 6.4.1 - Local File Inclusion Vulnerability
- NasaTheme Elessi
- File inclusion
Not analysed yet 4 Jul 2025
CVE-2025-4380 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- File inclusion
Not analysed yet 2 Jul 2025
CVE-2025-4689 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution
- scripteo Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager
- File inclusion
Not analysed yet 2 Jul 2025
CVE-2025-53339 CVE record

CVSS 7.5 High

WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Local File Inclusion Vulnerability
- Devnex Addons For Elementor
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-53281 CVE record

CVSS 7.5 High

WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability
- WPBean WPB Category Slider for WooCommerce
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-53259 CVE record

CVSS 7.5 High

WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability
- nicdark Hotel Booking
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-53257 CVE record

CVSS 7.5 High

WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability
- Serhii Pasyuk Gmedia Photo Gallery
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-24769 CVE record

CVSS 8.1 High

WordPress Zenny theme <= 1.7.5 - Local File Inclusion Vulnerability
- BZOTheme Zenny
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-28946 CVE record

CVSS 8.1 High

WordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability
- BZOTheme PrintXtore
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-28947 CVE record

CVSS 8.1 High

WordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability
- snstheme MBStore - Digital WooCommerce WordPress Theme
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-28990 CVE record

CVSS 8.1 High

WordPress SNS Vicky theme <= 3.7 - Local File Inclusion Vulnerability
- snstheme SNS Vicky
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-28998 CVE record

CVSS 8.1 High

WordPress SERPed.net plugin <= 4.6 - Local File Inclusion Vulnerability
- serpednet SERPed.net
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-30992 CVE record

CVSS 8.1 High

WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability
- thembay Puca
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-32298 CVE record

CVSS 7.5 High

WordPress CTUsers plugin <= 1.0.0 - Local File Inclusion Vulnerability
- Case-Themes CTUsers
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-49883 CVE record

CVSS 8.1 High

WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability
- thembay Greenmart
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-49886 CVE record

CVSS 8.1 High

WordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability
- WebGeniusLab Zikzag Core
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52723 CVE record

CVSS 8.1 High

WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability
- codesupplyco Networker
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52729 CVE record

CVSS 8.1 High

WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability
- thembay Diza
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52808 CVE record

CVSS 8.1 High

WordPress RealtyElite theme <= 1.0.0 - Local File Inclusion Vulnerability
- real-web RealtyElite
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52809 CVE record

CVSS 8.1 High

WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability
- John Russell National Weather Service Alerts
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52812 CVE record

CVSS 8.1 High

WordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability
- ApusWP Domnoo
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52814 CVE record

CVSS 8.1 High

WordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability
- ovatheme BRW
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52815 CVE record

CVSS 8.1 High

WordPress CityGov theme <= 1.9 - Local File Inclusion Vulnerability
- AncoraThemes CityGov
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52816 CVE record

CVSS 8.1 High

WordPress Zita theme <= 1.6.5 - Local File Inclusion Vulnerability
- themehunk Zita
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2023-25998 CVE record

CVSS 8.1 High

WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Local File Inclusion Vulnerability
- snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-24760 CVE record

CVSS 8.1 High

WordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability
- goalthemes Sofass
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-49416 CVE record

CVSS 8.1 High

WordPress FW Gallery plugin <= 8.0.0 - Local File Inclusion Vulnerability
- Fastw3b LLC FW Gallery
- File inclusion
Not analysed yet 27 Jun 2025
CVE-2025-52562 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Convey Panel Directory Traversal in LocaleController leading to Remote Code Execution
- panel
- Path traversal
- File inclusion
Not analysed yet 23 Jun 2025
CVE-2025-52715 CVE record

CVSS 7.5 High

WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability
- RadiusTheme Classified Listing
- File inclusion
Not analysed yet 20 Jun 2025
CVE-2025-52708 CVE record

CVSS 7.5 High

WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability
- RealMag777 HUSKY
- File inclusion
Not analysed yet 20 Jun 2025
CVE-2025-49508 CVE record

CVSS 8.1 High

WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability
- LoftOcean CozyStay
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-24761 CVE record

CVSS 8.1 High

WordPress DSK theme < 2.4 - Local File Inclusion vulnerability
- snstheme DSK
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-28991 CVE record

CVSS 8.1 High

WordPress Evon theme <= 3.4 - Local File Inclusion Vulnerability
- snstheme Evon
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-29002 CVE record

CVSS 8.1 High

WordPress Simen theme <= 4.6 - Local File Inclusion Vulnerability
- snstheme Simen
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-32549 CVE record

CVSS 7.5 High

WordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability
- mojoomla WPGYM
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-47572 CVE record

CVSS 7.5 High

WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability
- mojoomla School Management
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49251 CVE record

CVSS 8.1 High

WordPress Fana theme <= 1.1.28 - Local File Inclusion Vulnerability
- thembay Fana
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49252 CVE record

CVSS 8.1 High

WordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability
- thembay Besa
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49253 CVE record

CVSS 8.1 High

WordPress Lasa theme <= 1.1 - Local File Inclusion Vulnerability
- thembay Lasa
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49254 CVE record

CVSS 8.1 High

WordPress Nika theme <= 1.2.8 - Local File Inclusion Vulnerability
- thembay Nika
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49255 CVE record

CVSS 8.1 High

WordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability
- thembay Ruza
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49256 CVE record

CVSS 8.1 High

WordPress Sapa theme <= 1.1.14 - Local File Inclusion Vulnerability
- thembay Sapa
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49257 CVE record

CVSS 8.1 High

WordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability
- thembay Zota
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49258 CVE record

CVSS 8.1 High

WordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability
- thembay Maia
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49259 CVE record

CVSS 8.1 High

WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability
- thembay Hara
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49260 CVE record

CVSS 8.1 High

WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability
- thembay Aora
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-49261 CVE record

CVSS 8.1 High

WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability
- thembay Diza
- File inclusion
Not analysed yet 17 Jun 2025
CVE-2025-4200 CVE record

CVSS 8.1 High

Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
- BZOTheme Zagg - Electronics & Accessories WooCommerce WordPress Theme
- File inclusion
Not analysed yet 14 Jun 2025
CVE-2025-49454 CVE record

CVSS 8.1 High

WordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability
- LoftOcean TinySalt
- File inclusion
Not analysed yet 10 Jun 2025