Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2025-53578 CVE record

CVSS 8.1 High

WordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability
- gavias Kipso
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53576 CVE record

CVSS 8.1 High

WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability
- Ovatheme Events
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53334 CVE record

CVSS 8.1 High

WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability
- TieLabs Jannah
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53328 CVE record

CVSS 7.5 High

WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability
- Poll, Survey & Quiz Maker Plugin by Opinion Stage
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53326 CVE record

CVSS 7.5 High

WordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability
- CodeYatri Gutenify
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53248 CVE record

CVSS 8.1 High

WordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability
- unfoldwp Magazine
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53247 CVE record

CVSS 8.1 High

WordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability
- wpinterface BlogMarks
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53244 CVE record

CVSS 8.1 High

WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability
- unfoldwp Magazine Elite
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53227 CVE record

CVSS 8.1 High

WordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability
- unfoldwp Magazine Saga
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-53216 CVE record

CVSS 8.1 High

WordPress Glamer Theme <= 1.0.2 - Local File Inclusion Vulnerability
- themeuniver Glamer
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-49405 CVE record

CVSS 4.3 Medium

WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability
- Favethemes Houzez
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-49383 CVE record

CVSS 8.1 High

WordPress Neresa Theme <= 1.3 - Local File Inclusion Vulnerability
- CocoBasic Neresa
- File inclusion
Not analysed yet 28 Aug 2025
CVE-2025-49426 CVE record

CVSS 8.1 High

WordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability
- Dahz Kitring
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-49436 CVE record

CVSS 8.1 High

WordPress Anotte theme <= 1.8 - Local File Inclusion vulnerability
- CocoBasic Anotte
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-49889 CVE record

CVSS 8.1 High

WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability
- Edge-Themes Edge CPT
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-49892 CVE record

CVSS 8.1 High

WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability
- Uxper Booking
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-49894 CVE record

CVSS 8.1 High

WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability
- uxper Nuss
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-48149 CVE record

CVSS 8.1 High

WordPress Cook&Meal <= 1.2.3 - Local File Inclusion Vulnerability
- dedalx Cook&Meal
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-48157 CVE record

CVSS 8.1 High

WordPress Formality <= 1.5.9 - Local File Inclusion Vulnerability
- Michele Giorgi Formality
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-48160 CVE record

CVSS 8.1 High

WordPress Caliris <= 1.5 - Local File Inclusion Vulnerability
- CocoBasic Caliris
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-48171 CVE record

CVSS 8.1 High

WordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability
- thembay Cena Store
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-48298 CVE record

CVSS 7.5 High

WordPress SEOPress for MainWP <= 1.4 - Local File Inclusion Vulnerability
- Benjamin Denis SEOPress for MainWP
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-48302 CVE record

CVSS 7.5 High

WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability
- Roxnor FundEngine
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-53198 CVE record

CVSS 8.1 High

WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability
- favethemes Houzez
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-53204 CVE record

CVSS 8.1 High

WordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability
- ovatheme eventlist
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-53207 CVE record

CVSS 8.1 High

WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability
- WP Travel Gutenberg Blocks
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-53210 CVE record

CVSS 7.5 High

WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability
- bdthemes ZoloBlocks
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-53565 CVE record

CVSS 8.1 High

WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability
- RadiusTheme Widget for Google Reviews
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-53567 CVE record

CVSS 8.1 High

WordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability
- nK Ghost Kit
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-54017 CVE record

CVSS 7.5 High

WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability
- Cozmoslabs Paid Member Subscriptions
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-54028 CVE record

CVSS 7.5 High

WordPress CF7 WOW Styler Plugin <= 1.7.2 - Local File Inclusion Vulnerability
- Saleswonder Team: Tobias CF7 WOW Styler
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-54031 CVE record

CVSS 8.1 High

WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability
- Schiocco Support Board
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-54034 CVE record

CVSS 7.5 High

WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability
- Tribulant Software Newsletters
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-54750 CVE record

CVSS 7.5 High

WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability
- Aman Funnel Builder by FunnelKit
- File inclusion
Not analysed yet 20 Aug 2025
CVE-2025-8142 CVE record

CVSS 8.8 High

Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
- pencidesign Soledad
- File inclusion
Not analysed yet 16 Aug 2025
CVE-2024-8393 CVE record

CVSS 6.6 Medium

Woocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion
- delabon Woocommerce Blocks – Woolook
- File inclusion
Not analysed yet 16 Aug 2025
CVE-2025-7650 CVE record

CVSS 7.5 High

BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion
- setriosoft BizCalendar Web
- File inclusion
Not analysed yet 15 Aug 2025
CVE-2025-54701 CVE record

CVSS 8.1 High

WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability
- ThemeMove Unicamp
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-54700 CVE record

CVSS 8.1 High

WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability
- ThemeMove Makeaholic
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-54690 CVE record

CVSS 8.1 High

WordPress Xinterio Theme <= 4.2 - Local File Inclusion Vulnerability
- themeStek Xinterio
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-54689 CVE record

CVSS 8.1 High

WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability
- thembay Urna
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-3703 CVE record

CVSS 7.5 High

WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability
- wipeoutmedia CSS & JavaScript Toolbox
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-24766 CVE record

CVSS 7.5 High

WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability
- wproyal News Magazine X
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-25172 CVE record

CVSS 8.1 High

WordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability
- beeteam368 VidMov
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-25174 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability
- BeeTeam368 Extensions
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-28979 CVE record

CVSS 8.1 High

WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability
- ThimPress WP Pipes
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-30635 CVE record

CVSS 8.1 High

WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability
- ThemeAtelier IDonatePro
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-32288 CVE record

CVSS 7.5 High

WordPress RT-Theme 18 | Extensions plugin <= 2.4 - Local File Inclusion Vulnerability
- stmcan RT-Theme 18 | Extensions
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-48293 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability
- Dylan Kuhn Geo Mashup
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-48332 CVE record

CVSS 7.5 High

WordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability
- PublishPress Gutenberg Blocks
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-49036 CVE record

CVSS 8.1 High

WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability
- octagonwebstudio Premium Addons for KingComposer
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-49264 CVE record

CVSS 7.5 High

WordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability
- Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-49271 CVE record

CVSS 7.5 High

WordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability
- GravityWP - Merge Tags
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-52716 CVE record

CVSS 7.5 High

WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability
- Acato WP REST Cache
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-52728 CVE record

CVSS 7.5 High

WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability
- WebCodingPlace Responsive Posts Carousel Pro
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-52732 CVE record

CVSS 8.8 High

WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability
- RealMag777 GMap Targeting
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-52806 CVE record

CVSS 7.5 High

WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability
- eyecix JobSearch
- File inclusion
Not analysed yet 14 Aug 2025
CVE-2025-8913 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WellChoose｜Organization Portal System - Local File Inclusion
- WellChoose Organization Portal System
- File inclusion
Not analysed yet 13 Aug 2025
CVE-2025-51057 CVE record

CVSS 6.5 Medium

A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized 'readfile()' function ca…
- File inclusion
Not analysed yet 6 Aug 2025
CVE-2012-10025 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
- Advanced Custom Fields WordPress Plugin
- File inclusion
Not analysed yet 5 Aug 2025