Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-12923 CVE record

CVSS 7.5 High

Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
- emarket-design Video Gallery – YouTube Gallery, Playlist & Video Grid
- File inclusion
Not analysed yet 1 Jul 2026
cakephp/cakephp Packagist

CVSS 6.3 Medium

CakePHP: View::element() is missing a path containment check
- Path traversal
- File inclusion
<4.5.11 || >=4.6.0, <4.6.4 || >=5.0.0, <5.1.7 || >=5.2.0, <5.2.13 || >=5.3.0, <5.3.6 · fixed in 4.5.11, 4.6.4, 5.1.7, 5.2.13, 5.3.6

GHSA-wpvj-hjcr-h3p2 · CVE-2026-48820 Not analysed yet 26 Jun 2026
CVE-2026-57647 CVE record

CVSS 7.5 High

WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
- bPlugins Panorama Viewer – 360 Degree Image + Video Viewer
- File inclusion
Not analysed yet 26 Jun 2026
CVE-2025-68064 CVE record

CVSS 7.5 High

WordPress Goya Core plugin < 1.0.9.4 - Local File Inclusion vulnerability
- Everthemess Goya Core
- File inclusion
Not analysed yet 26 Jun 2026
CVE-2025-68063 CVE record

CVSS 7.5 High

WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability
- StylemixThemes Splash - Sport Club WordPress Theme for Basketball, Football, Hockey
- File inclusion
Not analysed yet 26 Jun 2026
CVE-2026-54845 CVE record

CVSS 8.1 High

WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability
- PluginUs.Net MDTF
- File inclusion
Not analysed yet 25 Jun 2026
CVE-2019-25760 CVE record

CVSS 6.9 Medium

Joomla! Component Easy Shop 1.2.3 Local File Inclusion
- Joomtech Easy Shop
- File inclusion
Not analysed yet 19 Jun 2026
CVE-2026-7515 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

BetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style
- BetterDocs Pro
- File inclusion
Not analysed yet 19 Jun 2026
CVE-2026-54814 CVE record

CVSS 8.1 High

WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability
- StylemixThemes Motors
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39590 CVE record

CVSS 8.1 High

WordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerability
- ThemeMove Atomlab
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39559 CVE record

CVSS 8.1 High

WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability
- codesupplyco Uppercase
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39523 CVE record

CVSS 8.1 High

WordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability
- Elated-Themes Solene Core
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69175 CVE record

CVSS 8.1 High

WordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability
- ThemeREX Line Agency
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69174 CVE record

CVSS 8.1 High

WordPress Etude theme <= 1.6 - Local File Inclusion vulnerability
- ThemeREX Etude
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69170 CVE record

CVSS 8.1 High

WordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability
- ThemeREX Eventicity
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69166 CVE record

CVSS 8.1 High

WordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability
- ThemeREX Gunslinger
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69164 CVE record

CVSS 8.1 High

WordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability
- ThemeREX Skyward
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69158 CVE record

CVSS 8.1 High

WordPress Granola theme <= 1.13 - Local File Inclusion vulnerability
- ThemeREX Granola
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69157 CVE record

CVSS 8.1 High

WordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability
- ThemeREX Gamic
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69144 CVE record

CVSS 8.1 High

WordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability
- ThemeREX Preservation
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69126 CVE record

CVSS 8.1 High

WordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability
- ThemeREX Fortius
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69123 CVE record

CVSS 8.1 High

WordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability
- ThemeREX Snow Club
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69120 CVE record

CVSS 8.1 High

WordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability
- ThemeREX Dazzle
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69115 CVE record

CVSS 8.1 High

WordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme <= 1.2.2 - Local File Inclusion vulnerability
- ThemeREX LuxMed | Medicine & Healthcare Doctor WordPress Theme
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69106 CVE record

CVSS 8.1 High

WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability
- ThemeREX Imba
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-40731 CVE record

CVSS 8.1 High

WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability
- Mikado-Themes ChapterOne
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-40721 CVE record

CVSS 7.5 High

WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability
- BdThemes Element Pack Pro
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39582 CVE record

CVSS 8.1 High

WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability
- xtemos Hitek
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39558 CVE record

CVSS 8.1 High

WordPress Malmö theme <= 2.2 - Local File Inclusion vulnerability
- Elated-Themes Malmö
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39537 CVE record

CVSS 8.1 High

WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
- Mikado-Themes Mikado Core
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-22338 CVE record

CVSS 8.1 High

WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability
- ThemeREX EcoBlue
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-22331 CVE record

CVSS 8.1 High

WordPress AutoParts theme <= 1.5.8 - Local File Inclusion vulnerability
- ThemeREX AutoParts
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-22330 CVE record

CVSS 8.1 High

WordPress Right Way theme <= 4.0 - Local File Inclusion vulnerability
- Themeum Right Way
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-22326 CVE record

CVSS 8.1 High

WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability
- AxiomThemes Reprizo
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-22325 CVE record

CVSS 8.1 High

WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability
- AxiomThemes Promo
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69173 CVE record

CVSS 8.1 High

WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability
- ThemeREX Tipsy
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69172 CVE record

CVSS 8.1 High

WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability
- ThemeREX Resurs
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69171 CVE record

CVSS 8.1 High

WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability
- ThemeREX Orpheus
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69161 CVE record

CVSS 8.1 High

WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability
- ThemeREX Snowy
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69148 CVE record

CVSS 8.1 High

WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability
- ThemeREX Quirky
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69145 CVE record

CVSS 8.1 High

WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability
- ThemeREX Gat
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69117 CVE record

CVSS 8.1 High

WordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability
- ThemeREX Ingenioso
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-69110 CVE record

CVSS 8.1 High

WordPress AirSupply theme <= 2.0.0 - Local File Inclusion vulnerability
- ThemeREX AirSupply
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-58954 CVE record

CVSS 8.1 High

WordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability
- ThemeREX HomeRoofer
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-58953 CVE record

CVSS 8.1 High

WordPress Joly theme <= 1.22.0 - Local File Inclusion vulnerability
- ThemeREX Joly
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-58952 CVE record

CVSS 8.1 High

WordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerability
- ThemeREX Neuronet
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-49403 CVE record

CVSS 7.5 High

WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability
- AA-Team Premium Age Verification / Restriction for WordPress
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39568 CVE record

CVSS 8.1 High

WordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerability
- Elated-Themes Mr. SEO
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2026-39549 CVE record

CVSS 8.1 High

WordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerability
- Elated-Themes Aperitif
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2026-39547 CVE record

CVSS 8.1 High

WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability
- Select-Themes Getaway
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2026-39522 CVE record

CVSS 8.1 High

WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability
- Elated-Themes Solene
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2026-34895 CVE record

CVSS 8.1 High

WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability
- WebGeniusLab Softlab Core
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2026-34894 CVE record

CVSS 8.1 High

WordPress Integrio Core plugin < 1.2.8 - Local File Inclusion vulnerability
- WebGeniusLab Integrio Core
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2026-34893 CVE record

CVSS 8.1 High

WordPress Thegov Core plugin < 2.0.23 - Local File Inclusion vulnerability
- WebGeniusLab Thegov Core
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2025-69178 CVE record

CVSS 8.1 High

WordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerability
- CactusThemes Truemag
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2025-69177 CVE record

CVSS 8.1 High

WordPress Roneous theme <= 2.1.5 - Local File Inclusion vulnerability
- THEMELOGI Roneous
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2025-69176 CVE record

CVSS 8.1 High

WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability
- ThemeREX ITactics
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2025-69168 CVE record

CVSS 8.1 High

WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
- ThemeREX Spike
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2025-69167 CVE record

CVSS 8.1 High

WordPress Eros theme <= 1.3 - Local File Inclusion vulnerability
- ThemeREX Eros
- File inclusion
Not analysed yet 16 Jun 2026
CVE-2025-69165 CVE record

CVSS 8.1 High

WordPress Choreo theme <= 1.6 - Local File Inclusion vulnerability
- ThemeREX Choreo
- File inclusion
Not analysed yet 16 Jun 2026