Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2025-58994 CVE record

CVSS 8.1 High

WordPress Greenify theme <= 2.2 - Local File Inclusion vulnerability
- designervily Greenify
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-53252 CVE record

CVSS 7.5 High

WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability
- zozothemes Zegen
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-48330 CVE record

CVSS 7.5 High

WordPress Real Time Validation for Gravity Forms <= 1.7.0 - Local File Inclusion Vulnerability
- Daman Jeet Real Time Validation for Gravity Forms
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-48290 CVE record

CVSS 8.1 High

WordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability
- bslthemes Kinsley
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-39468 CVE record

CVSS 8.1 High

WordPress Modal Survey plugin <= 2.0.2.0.1 - Local File Inclusion vulnerability
- pantherius Modal Survey
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-39466 CVE record

CVSS 8.1 High

WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability
- Mikado-Themes Dør
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-39463 CVE record

CVSS 7.5 High

WordPress Dessau theme < 1.9 - Local File Inclusion vulnerability
- Select-Themes Dessau
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-12497 CVE record

CVSS 8.1 High

Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
- averta Premium Portfolio Features for Phlox theme
- File inclusion
Not analysed yet 5 Nov 2025
CVE-2025-11704 CVE record

CVSS 7.5 High

Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion
- impacttechlab Elegance Menu
- File inclusion
Not analysed yet 4 Nov 2025
CVE-2025-11920 CVE record

CVSS 8.8 High

WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- whyun WPCOM Member
- File inclusion
Not analysed yet 1 Nov 2025
CVE-2025-64364 CVE record

CVSS 7.5 High

WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability
- StylemixThemes Masterstudy
- File inclusion
Not analysed yet 31 Oct 2025
CVE-2025-64363 CVE record

CVSS 7.5 High

WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability
- SeventhQueen Kleo
- File inclusion
Not analysed yet 31 Oct 2025
CVE-2025-64360 CVE record

CVSS 7.5 High

WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability
- StylemixThemes Consulting Elementor Widgets
- File inclusion
Not analysed yet 31 Oct 2025
CVE-2025-64359 CVE record

CVSS 7.5 High

WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability
- StylemixThemes Consulting
- File inclusion
Not analysed yet 31 Oct 2025
CVE-2024-14002 CVE record

CVSS 7.1 High

Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis
- Nagios XI
- File inclusion
Not analysed yet 30 Oct 2025
CVE-2025-64284 CVE record

CVSS 7.5 High

WordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability
- Majestic Support
- File inclusion
Not analysed yet 29 Oct 2025
CVE-2025-64216 CVE record

CVSS 7.5 High

WordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability
- ThemeSphere SmartMag
- File inclusion
Not analysed yet 29 Oct 2025
CVE-2025-64195 CVE record

CVSS 7.5 High

WordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability
- ThimPress Eduma
- File inclusion
Not analysed yet 29 Oct 2025
CVE-2025-62868 CVE record

CVSS 8.1 High

WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability
- Edge-Themes Edge CPT
- File inclusion
Not analysed yet 24 Oct 2025
CVE-2025-11023 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Local File Inclusion in ArkSigner's AcBakImzala
- ArkSigner Software and Hardware Inc. AcBakImzala
- File inclusion
- CWE-829
Not analysed yet 23 Oct 2025
CVE-2025-62054 CVE record

CVSS 7.5 High

WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability
- favethemes Houzez Theme - Functionality
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-62029 CVE record

CVSS 8.1 High

WordPress Grevo theme <= 2.4 - Local File Inclusion vulnerability
- themesion Grevo
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-59564 CVE record

CVSS 8.1 High

WordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability
- ThemeMove EduMall
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-59558 CVE record

CVSS 8.1 High

WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability
- ThemeMove Billey
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-59555 CVE record

CVSS 8.1 High

WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability
- ThemeMove Medizin
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-59550 CVE record

CVSS 8.1 High

WordPress Xcare theme < 6.5 - Local File Inclusion vulnerability
- designervily Xcare
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-58967 CVE record

CVSS 8.1 High

WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability
- ThemeMove Businext
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-58958 CVE record

CVSS 8.1 High

WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability
- ThemeMove SmilePure
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-58955 CVE record

CVSS 8.1 High

WordPress Karzo theme < 2.6 - Local File Inclusion vulnerability
- designervily Karzo
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-49935 CVE record

CVSS 7.5 High

WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability
- xtemos WoodMart
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-49921 CVE record

CVSS 7.5 High

WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability
- Crocoblock JetReviews
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-48338 CVE record

CVSS 7.5 High

WordPress WP Abstracts plugin <= 2.7.4 - Local File Inclusion vulnerability
- Kevon Adonis WP Abstracts
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-32657 CVE record

CVSS 7.5 High

WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability
- RadiusTheme Testimonial Slider And Showcase Pro
- File inclusion
Not analysed yet 22 Oct 2025
CVE-2025-11722 CVE record

CVSS 7.5 High

Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion
- ikhodal Woocommerce Category and Products Accordion Panel
- File inclusion
Not analysed yet 15 Oct 2025
CVE-2025-7634 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion
- wptravelengine WP Travel Engine – Tour Booking Plugin – Tour Operator Software
- File inclusion
Not analysed yet 9 Oct 2025
CVE-2025-7721 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion
- beardev JoomSport – for Sports: Team & League, Football, Hockey & more
- File inclusion
Not analysed yet 3 Oct 2025
CVE-2025-9991 CVE record

CVSS 8.1 High

Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion
- migli Tiny Bootstrap Elements Light
- File inclusion
Not analysed yet 30 Sept 2025
CVE-2025-9993 CVE record

CVSS 8.1 High

Bei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusion
- d3rd4v1d Bei Fen – WordPress Backup Plugin
- File inclusion
Not analysed yet 30 Sept 2025
CVE-2025-60153 CVE record

CVSS 7.5 High

WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability
- wpshuffle Subscribe To Unlock
- File inclusion
Not analysed yet 26 Sept 2025
CVE-2025-60150 CVE record

CVSS 7.5 High

WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability
- wpshuffle Subscribe to Download
- File inclusion
Not analysed yet 26 Sept 2025
CVE-2025-60126 CVE record

CVSS 8.8 High

WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability
- PluginOps Testimonial Slider
- File inclusion
Not analysed yet 26 Sept 2025
CVE-2025-58973 CVE record

CVSS 7.5 High

WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability
- hashthemes Easy Elementor Addons
- File inclusion
Not analysed yet 22 Sept 2025
CVE-2025-59588 CVE record

CVSS 7.5 High

WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability
- PenciDesign Soledad
- File inclusion
Not analysed yet 22 Sept 2025
CVE-2025-53450 CVE record

CVSS 7.5 High

WordPress Easy Pricing Table WP Plugin <= 1.1.3 - Local File Inclusion Vulnerability
- Pluginwale Easy Pricing Table WP
- File inclusion
Not analysed yet 22 Sept 2025
CVE-2025-57925 CVE record

CVSS 7.5 High

WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability
- immonex Kickstart Team
- File inclusion
Not analysed yet 22 Sept 2025
CVE-2025-10143 CVE record

CVSS 7.5 High

Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
- catchthemes Catch Dark Mode
- File inclusion
Not analysed yet 17 Sept 2025
CVE-2025-10269 CVE record

CVSS 7.5 High

Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion
- Theme-Spirit Spirit Framework
- File inclusion
Not analysed yet 12 Sept 2025
CVE-2025-9874 CVE record

CVSS 7.5 High

Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
- webcodingplace Ultimate Classified Listings
- File inclusion
Not analysed yet 11 Sept 2025
CVE-2025-58215 CVE record

CVSS 8.1 High

WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability
- gavias Ziston
- File inclusion
Not analysed yet 9 Sept 2025
CVE-2025-54709 CVE record

CVSS 8.1 High

WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability
- uxper Sala
- File inclusion
Not analysed yet 9 Sept 2025
CVE-2025-47571 CVE record

CVSS 7.5 High

WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability
- highwarden Super Store Finder
- File inclusion
Not analysed yet 9 Sept 2025
CVE-2025-47695 CVE record

CVSS 7.5 High

WordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability
- solwin Blog Designer PRO
- File inclusion
Not analysed yet 9 Sept 2025
CVE-2025-58206 CVE record

CVSS 8.1 High

WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability
- ThemeMove MaxCoach
- File inclusion
Not analysed yet 5 Sept 2025
CVE-2025-58214 CVE record

CVSS 8.1 High

WordPress Indutri Theme < 1.3.0 - Local File Inclusion Vulnerability
- gavias Indutri
- File inclusion
Not analysed yet 5 Sept 2025
CVE-2025-57889 CVE record

CVSS 7.5 High

WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability
- RealMag777 InPost Gallery
- File inclusion
Not analysed yet 5 Sept 2025
CVE-2025-9990 CVE record

CVSS 8.1 High

WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion
- smackcoders WordPress Helpdesk Integration
- File inclusion
Not analysed yet 5 Sept 2025
CVE-2025-58637 CVE record

CVSS 7.5 High

WordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability
- immonex Kickstart
- File inclusion
Not analysed yet 3 Sept 2025
CVE-2025-58608 CVE record

CVSS 7.5 High

WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability
- BuddyDev MediaPress
- File inclusion
Not analysed yet 3 Sept 2025
CVE-2025-47696 CVE record

CVSS 8.1 High

WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability
- solwin Blog Designer PRO
- File inclusion
Not analysed yet 31 Aug 2025
CVE-2025-54716 CVE record

CVSS 8.1 High

WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability
- ovatheme Ireca
- File inclusion
Not analysed yet 28 Aug 2025