Advisories · Weakness
File inclusion.
A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 7.5 High
LT Unleashed <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion via 'template' Parameter
- cvedovini LT Unleashed
- File inclusion
- CVSS 6.9 Medium
FoF Pretty Mail 1.1.2 Local File Inclusion via Email Template Settings
- FriendsofFlarum Pretty Mail
- File inclusion
- CVSS 7.5 High
WordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability
- Dream-Theme The7 Elements
- File inclusion
- CVSS 7.5 High
WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability
- Dream-Theme The7
- File inclusion
- CVSS 7.5 High
WordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability
- AndonDesign UDesign Core
- File inclusion
- CVSS 7.5 High
WordPress Ronneby Theme Core plugin <= 1.5.68 - Local File Inclusion vulnerability
- DFDevelopment Ronneby Theme Core
- File inclusion
- CVSS 7.5 High
WordPress North - Required Plugin plugin <= 1.4.2 - Local File Inclusion vulnerability
- fuelthemes North - Required Plugin
- File inclusion
- CVSS 7.5 High
WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability
- thembay Hara
- File inclusion
- CVSS 7.5 High
WordPress Turitor theme < 1.5.3 - Local File Inclusion vulnerability
- trippleS Turitor
- File inclusion
- CVSS 7.5 High
WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability
- thembay Besa
- File inclusion
- CVSS 7.5 High
WordPress Fashion theme < 5.3.0 - Local File Inclusion vulnerability
- Opal_WP Fashion
- File inclusion
- CVSS 7.5 High
WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability
- thembay Urna
- File inclusion
- CVSS 7.5 High
WordPress Digiqole theme < 2.2.7 - Local File Inclusion vulnerability
- trippleS Digiqole
- File inclusion
- CVSS 7.5 High
WordPress Sailing theme < 4.4.6 - Local File Inclusion vulnerability
- ThimPress Sailing
- File inclusion
- CVSS 7.5 High
WordPress ekommart theme < 4.3.1 - Local File Inclusion vulnerability
- Opal_WP ekommart
- File inclusion
- CVSS 7.5 High
WordPress Jobmonster Elementor Addon plugin <= 1.1.4 - Local File Inclusion vulnerability
- NooTheme Jobmonster Elementor Addon
- File inclusion
- CVSS 7.5 High
WordPress Exhibz theme <= 3.0.9 - Local File Inclusion vulnerability
- trippleS Exhibz
- File inclusion
- CVSS 7.5 High
WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability
- NooTheme Jobmonster
- File inclusion
- CVSS 7.5 High
WordPress Select Core plugin < 2.6 - Local File Inclusion vulnerability
- Select-Themes Select Core
- File inclusion
- CVSS 8.8 High
WordPress Wilmër theme < 3.5 - Local File Inclusion vulnerability
- Mikado-Themes Wilmër
- File inclusion
- CVSS 4.3 Medium
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.
- File inclusion
- CVSS 8.1 High
My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller
- wphocus My auctions allegro
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php.
- File inclusion
- CVSS 6.6 Medium
WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability
- MatrixAddons Easy Invoice
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
Unauthenticated Local File Inclusion in php module
- METZ CONNECT Energy-Controlling EWIO2-M
- METZ CONNECT Energy-Controlling EWIO2-M-BM
- File inclusion
- CVSS 8.8 High
Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion
- ikhodal Category and Product Woocommerce Tabs
- File inclusion
- CVSS 5.8 Medium
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
- Path traversal
- File inclusion
>=1.7.7, <2.0.3 · fixed in 2.0.3
GHSA-g2j9-g8r5-rg82 · CVE-2025-64714 - CVSS 8.7 High
DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI
- DBL Technology (DBLTek) GoIP-1
- Path traversal
- File inclusion
- CVSS 7.5 High
A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117.
- Path traversal
- File inclusion
- CVSS 8.1 High
WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability
- Edge-Themes Alloggio - Hotel Booking
- File inclusion
- CVSS 7.5 High
WordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability
- Ido Kobelkowsky Simple Payment
- File inclusion
- CVSS 8.1 High
WordPress Savory theme <= 2.5 - Local File Inclusion vulnerability
- Elated-Themes Savory
- File inclusion
- CVSS 7.5 High
WordPress Revolution theme < 2.5.8 - Local File Inclusion vulnerability
- fuelthemes Revolution
- File inclusion
- CVSS 8.1 High
WordPress Academist theme < 1.3 - Local File Inclusion vulnerability
- Elated-Themes Academist
- File inclusion
- CVSS 8.1 High
WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability
- favethemes Houzez
- File inclusion
- CVSS 8.1 High
WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability
- CodexThemes TheGem Theme Elements (for WPBakery)
- File inclusion
- CVSS 8.1 High
WordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability
- ApusTheme ITok
- File inclusion
- CVSS 8.1 High
WordPress Famita theme <= 1.54 - Local File Inclusion vulnerability
- ApusTheme Famita
- File inclusion
- CVSS 7.5 High
WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability
- WPClever WPC Product Options for WooCommerce
- File inclusion
- CVSS 7.5 High
WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability
- Premmerce
- File inclusion
- CVSS 7.5 High
WordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability
- Alexander AnyComment
- File inclusion
- CVSS 7.5 High
WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability
- Josh Kohlbach WooCommerce Store Toolkit
- File inclusion
- CVSS 7.5 High
WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability
- Josh Kohlbach Store Exporter
- File inclusion
- CVSS 7.5 High
WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability
- Kyle Phillips Favorites
- File inclusion
- CVSS 7.5 High
WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability
- aguilatechnologies WP Customer Area
- File inclusion
- CVSS 7.5 High
WordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability
- ThimPress LearnPress Export Import
- File inclusion
- CVSS 8.1 High
WordPress InHype - Blog & Magazine WordPress Theme theme <= 1.5.2 - Local File Inclusion vulnerability
- dedalx InHype - Blog & Magazine WordPress Theme
- File inclusion
- CVSS 8.1 High
WordPress Saxon - Viral Content Blog & Magazine Marketing WordPress Theme theme <= 1.9.3 - Local File Inclusion vulnerability
- dedalx Saxon - Viral Content Blog & Magazine Marketing WordPress Theme
- File inclusion
- CVSS 8.1 High
WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability
- owenr88 Simple Contact Forms
- File inclusion
- CVSS 7.5 High
WordPress Clearblue® Ovulation Calculator plugin <= 1.2.4 - Local File Inclusion vulnerability
- Clearblue® Ovulation Calculator
- File inclusion
- CVSS 7.5 High
WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability
- Premmerce Product Search for WooCommerce
- File inclusion
- CVSS 7.5 High
WordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerability
- Premmerce User Roles
- File inclusion
- CVSS 7.5 High
WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability
- Premmerce Wholesale Pricing for WooCommerce
- File inclusion
- CVSS 7.5 High
WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability
- Premmerce Wishlist for WooCommerce
- File inclusion
- CVSS 8.1 High
WordPress Immocaster WordPress Plugin plugin <= 1.3.6 - Local File Inclusion vulnerability
- Hinnerk Altenburg Immocaster WordPress Plugin
- File inclusion
- CVSS 7.5 High
WordPress PoloPag – Pix Automático para Woocommerce plugin <= 2.0.9 - Local File Inclusion vulnerability
- PoloPag – Pix Automático para Woocommerce
- File inclusion
- CVSS 7.5 High
WordPress Lazy Load Optimizer plugin <= 1.4.7 - Local File Inclusion vulnerability
- Processby Lazy Load Optimizer
- File inclusion
- CVSS 7.5 High
WordPress Responsive Sidebar plugin <= 1.2.2 - Local File Inclusion vulnerability
- Processby Responsive Sidebar
- File inclusion
- CVSS 8.1 High
WordPress Leblix Theme <= 2.4 - Local File Inclusion Vulnerability
- Creatives_Planet Leblix
- File inclusion