Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-8208 CVE record

CVSS 8.9 High

PHP file inclusion in gibbon
- gibbon
- File inclusion
Not analysed yet 9 May 2026
CVE-2026-1620 CVE record

CVSS 8.8 High

Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter
- Livemesh Addons by Elementor
- File inclusion
Not analysed yet 16 Apr 2026
froxlor/froxlor Packagist

CVSS 10.0 CriticalCritical · CVSS 9+

Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution
- File inclusion
<2.3.6 · fixed in 2.3.6

GHSA-w59f-67xm-rxx7 · CVE-2026-41228 Not analysed yet 16 Apr 2026
CVE-2026-39387 CVE record

CVSS 7.2 High

BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter
- BoidCMS
- File inclusion
Not analysed yet 14 Apr 2026
CVE-2026-30480 CVE record

CVSS 6.5 Medium

A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files from the server filesyst…
- File inclusion
Not analysed yet 14 Apr 2026
CVE-2025-58913 CVE record

CVSS 8.1 High

WordPress VideoPro theme <= 2.3.8.1 - Local File Inclusion vulnerability
- CactusThemes VideoPro
- File inclusion
Not analysed yet 10 Apr 2026
CVE-2025-5804 CVE record

CVSS 7.5 High

WordPress Case Theme User < 1.0.4 - Local File Inclusion Vulnerability
- Case Themes Case Theme User
- File inclusion
Not analysed yet 10 Apr 2026
CVE-2026-39684 CVE record

CVSS 7.5 High

WordPress OrganicFood theme <= 3.6.4 - Local File Inclusion vulnerability
- UnTheme OrganicFood
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39681 CVE record

CVSS 7.5 High

WordPress Homeo theme <= 1.2.59 - Local File Inclusion vulnerability
- ApusTheme Homeo
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39679 CVE record

CVSS 7.5 High

WordPress Freeio theme <= 1.3.21 - Local File Inclusion vulnerability
- ApusTheme Freeio
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39677 CVE record

CVSS 7.5 High

WordPress Emphires theme <= 3.9 - Local File Inclusion vulnerability
- Creatives_Planet Emphires
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39623 CVE record

CVSS 7.5 High

WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability
- kutethemes Biolife
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39613 CVE record

CVSS 7.5 High

WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability
- kutethemes Boutique
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39611 CVE record

CVSS 7.5 High

WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
- kutethemes KuteShop
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39544 CVE record

CVSS 7.5 High

WordPress LabtechCO theme <= 8.3 - Local File Inclusion vulnerability
- themeStek LabtechCO
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-39538 CVE record

CVSS 7.5 High

WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
- Mikado-Themes Mikado Core
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2026-34787 CVE record

CVSS 6.5 Medium

Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter
- emlog
- File inclusion
Not analysed yet 3 Apr 2026
CVE-2018-25231 CVE record

CVSS 6.9 Medium

HeidiSQL 9.5.0.5196 Denial of Service via Preferences
- HeidiSQL
- File inclusion
Not analysed yet 30 Mar 2026
dolibarr/dolibarr Packagist

CVSS 6.5 Medium

Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php
- File inclusion
<23.0.0 · fixed in 23.0.0

GHSA-2mfj-r695-5h9r · CVE-2026-34036 Not analysed yet 27 Mar 2026
CVE-2026-32537 CVE record

CVSS 7.5 High

WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability
- nK Visual Portfolio, Photo Gallery & Post Grid
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-32531 CVE record

CVSS 8.1 High

WordPress Kunco theme < 1.4.5 - Local File Inclusion vulnerability
- gavias Kunco
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-32505 CVE record

CVSS 8.1 High

WordPress Kiddy theme <= 2.0.8 - Local File Inclusion vulnerability
- CreativeWS Kiddy
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-32504 CVE record

CVSS 8.1 High

WordPress VintWood theme <= 1.1.8 - Local File Inclusion vulnerability
- CreativeWS VintWood
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-32503 CVE record

CVSS 8.1 High

WordPress Trendustry theme <= 1.1.4 - Local File Inclusion vulnerability
- CreativeWS Trendustry
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-32500 CVE record

CVSS 8.1 High

WordPress MetaMax theme <= 1.1.4 - Local File Inclusion vulnerability
- CreativeWS MetaMax
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27081 CVE record

CVSS 8.1 High

WordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability
- Mikado-Themes Rosebud
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27080 CVE record

CVSS 8.1 High

WordPress Deston theme <= 1.0 - Local File Inclusion vulnerability
- Mikado-Themes Deston
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27079 CVE record

CVSS 8.1 High

WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability
- Mikado-Themes Amfissa
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27078 CVE record

CVSS 8.1 High

WordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability
- Mikado-Themes Emaurri
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27077 CVE record

CVSS 8.1 High

WordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability
- Mikado-Themes MultiOffice
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27076 CVE record

CVSS 8.1 High

WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability
- Mikado-Themes LuxeDrive
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27075 CVE record

CVSS 8.1 High

WordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability
- Mikado-Themes Belfort
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27048 CVE record

CVSS 8.1 High

WordPress The Aisle Core plugin <= 2.0.5 - Local File Inclusion vulnerability
- Elated-Themes The Aisle Core
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-27047 CVE record

CVSS 8.1 High

WordPress Curly Core plugin <= 2.1.6 - Local File Inclusion vulnerability
- Mikado-Themes Curly Core
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25464 CVE record

CVSS 8.1 High

WordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerability
- TieLabs Jannah
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25458 CVE record

CVSS 8.1 High

WordPress Moments theme <= 2.2 - Local File Inclusion vulnerability
- Select-Themes Moments
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25457 CVE record

CVSS 8.1 High

WordPress Mixtape theme <= 2.1 - Local File Inclusion vulnerability
- Select-Themes Mixtape
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25382 CVE record

CVSS 8.1 High

WordPress IdealAuto theme < 3.8.6 - Local File Inclusion vulnerability
- jwsthemes IdealAuto
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25381 CVE record

CVSS 8.1 High

WordPress LoveDate theme < 3.8.6 - Local File Inclusion vulnerability
- jwsthemes LoveDate
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25380 CVE record

CVSS 8.1 High

WordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerability
- jwsthemes Feedy
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25379 CVE record

CVSS 8.1 High

WordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability
- jwsthemes StreamVid
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-25017 CVE record

CVSS 8.1 High

WordPress NaturaLife Extensions plugin <= 2.1 - Local File Inclusion vulnerability
- stmcan NaturaLife Extensions
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22516 CVE record

CVSS 8.1 High

WordPress Wizor's theme <= 2.12 - Local File Inclusion vulnerability
- AncoraThemes Wizor's
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22515 CVE record

CVSS 8.1 High

WordPress VegaDays theme <= 1.2.0 - Local File Inclusion vulnerability
- AncoraThemes VegaDays
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22514 CVE record

CVSS 8.1 High

WordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability
- AncoraThemes Unica
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22513 CVE record

CVSS 8.1 High

WordPress Triompher theme <= 1.1.0 - Local File Inclusion vulnerability
- AncoraThemes Triompher
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22512 CVE record

CVSS 8.1 High

WordPress Roisin theme <= 1.2.1 - Local File Inclusion vulnerability
- Elated-Themes Roisin
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22511 CVE record

CVSS 8.1 High

WordPress NeoBeat theme <= 1.2 - Local File Inclusion vulnerability
- Elated-Themes NeoBeat
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22509 CVE record

CVSS 8.1 High

WordPress Gioia theme <= 1.4 - Local File Inclusion vulnerability
- Elated-Themes Gioia
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22508 CVE record

CVSS 8.1 High

WordPress Dentalux theme <= 3.3 - Local File Inclusion vulnerability
- AncoraThemes Dentalux
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22506 CVE record

CVSS 8.1 High

WordPress Amoli theme <= 1.0 - Local File Inclusion vulnerability
- Elated-Themes Amoli
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22504 CVE record

CVSS 8.1 High

WordPress ProLingua theme <= 1.1.12 - Local File Inclusion vulnerability
- ThemeREX ProLingua
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22503 CVE record

CVSS 8.1 High

WordPress Nelson theme <= 1.2.0 - Local File Inclusion vulnerability
- ThemeREX Nelson
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22502 CVE record

CVSS 8.1 High

WordPress Mr. Cobbler theme <= 1.1.9 - Local File Inclusion vulnerability
- AncoraThemes Mr. Cobbler
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22499 CVE record

CVSS 8.1 High

WordPress Lella theme <= 1.2 - Local File Inclusion vulnerability
- Elated-Themes Lella
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22498 CVE record

CVSS 8.1 High

WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability
- Elated-Themes Laurent
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22496 CVE record

CVSS 8.1 High

WordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability
- AncoraThemes Hypnotherapy
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22495 CVE record

CVSS 8.1 High

WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability
- AncoraThemes Greenville
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22494 CVE record

CVSS 8.1 High

WordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability
- ThemeREX Good Homes
- File inclusion
Not analysed yet 25 Mar 2026
CVE-2026-22493 CVE record

CVSS 8.1 High

WordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerability
- Elated-Themes Gaspard
- File inclusion
Not analysed yet 25 Mar 2026