Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2025-67616 CVE record

CVSS 8.1 High

WordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability
- BZOTheme Mella
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67615 CVE record

CVSS 8.1 High

WordPress Myour theme <= 1.5.1 - Local File Inclusion vulnerability
- bslthemes Myour
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-63017 CVE record

CVSS 7.5 High

WordPress WerkStatt plugin plugin <= 1.6.6 - Local File Inclusion vulnerability
- fuelthemes WerkStatt Plugin
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-54003 CVE record

CVSS 8.1 High

WordPress Depot theme <= 1.16 - Local File Inclusion vulnerability
- Mikado-Themes Depot
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-50003 CVE record

CVSS 8.1 High

WordPress Amuli theme <= 2.3.0 - Local File Inclusion vulnerability
- axiomthemes Amuli
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-49994 CVE record

CVSS 8.1 High

WordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability
- ovatheme Athens
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-47474 CVE record

CVSS 8.1 High

WordPress Anarkali theme <= 1.0.9 - Local File Inclusion vulnerability
- Ninetheme Anarkali
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-14502 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

News and Blog Designer Bundle <= 1.1 - Unauthenticated Local File Inclusion
- vaghasia3 News and Blog Designer Bundle
- File inclusion
Not analysed yet 14 Jan 2026
CVE-2022-50897 CVE record

CVSS 8.7 High

mPDF 7.0 - Local File Inclusion
- mPDF
- File inclusion
Not analysed yet 13 Jan 2026
CVE-2026-22521 CVE record

CVSS 7.5 High

WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability
- G5Theme Handmade Framework
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-67937 CVE record

CVSS 8.1 High

WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability
- Mikado-Themes Hendon
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-67936 CVE record

CVSS 8.1 High

WordPress Curly theme < 3.3 - Local File Inclusion vulnerability
- Mikado-Themes Curly
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-67935 CVE record

CVSS 8.1 High

WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability
- Mikado-Themes Optimize
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-67934 CVE record

CVSS 8.1 High

WordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability
- Mikado-Themes Wellspring
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-67925 CVE record

CVSS 7.5 High

WordPress Corpkit theme <= 2.0 - Local File Inclusion vulnerability
- zozothemes Corpkit
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-67920 CVE record

CVSS 8.1 High

WordPress Neo Ocular theme < 1.2 - Local File Inclusion vulnerability
- Elated-Themes Neo Ocular
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-22712 CVE record

CVSS 8.1 High

WordPress Typify theme <= 3.0.2 - Local File Inclusion vulnerability
- QantumThemes Typify
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-22708 CVE record

CVSS 8.1 High

WordPress Mitech theme <= 2.3.4 - Local File Inclusion vulnerability
- ThemeMove Mitech
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-22707 CVE record

CVSS 8.1 High

WordPress Moody theme <= 2.7.3 - Local File Inclusion vulnerability
- ThemeMove Moody
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-22509 CVE record

CVSS 8.1 High

WordPress Atlas theme <= 2.1.0 - Local File Inclusion vulnerability
- TMRW-studio Atlas
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-14431 CVE record

CVSS 8.1 High

WordPress Navian theme <= 1.5.4 - Local File Inclusion vulnerability
- THEMELOGI Navian
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-14430 CVE record

CVSS 8.1 High

WordPress Brook - Agency Business Creative theme <= 2.9.0 - Local File Inclusion vulnerability
- ThemeMove Brook
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-14429 CVE record

CVSS 8.1 High

WordPress AeroLand theme <= 1.6.6 - Local File Inclusion vulnerability
- ThemeMove AeroLand
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-14359 CVE record

CVSS 8.1 High

WordPress Oshine theme < 7.3.0 - Local File Inclusion vulnerability
- brandexponents Oshine
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-12550 CVE record

CVSS 8.1 High

WordPress OchaHouse theme <= 2.2.8 - Local File Inclusion vulnerability
- jwsthemes OchaHouse
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-12549 CVE record

CVSS 8.1 High

WordPress Rozy - Flower Shop theme <= 1.2.25 - Local File Inclusion vulnerability
- magentech Rozy - Flower Shop
- File inclusion
Not analysed yet 8 Jan 2026
CVE-2025-69080 CVE record

CVSS 8.1 High

WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability
- JanStudio Gecko
- File inclusion
Not analysed yet 7 Jan 2026
CVE-2025-69081 CVE record

CVSS 8.1 High

WordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability
- ThemeREX Hope
- File inclusion
Not analysed yet 7 Jan 2026
CVE-2025-32304 CVE record

CVSS 8.1 High

WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability
- Mojoomla WPCHURCH
- File inclusion
Not analysed yet 6 Jan 2026
CVE-2025-69083 CVE record

CVSS 8.1 High

WordPress Frappé theme <= 1.8 - Local File Inclusion vulnerability
- Elated-Themes Frappé
- File inclusion
Not analysed yet 6 Jan 2026
CVE-2025-69356 CVE record

CVSS 7.5 High

WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerability
- CodexThemes TheGem Theme Elements (for Elementor)
- File inclusion
Not analysed yet 6 Jan 2026
CVE-2025-69342 CVE record

CVSS 7.5 High

WordPress Calafate theme <= 1.7.7 - Local File Inclusion vulnerability
- VanKarWai Calafate
- File inclusion
Not analysed yet 6 Jan 2026
CVE-2025-69086 CVE record

CVSS 8.1 High

WordPress Issabella theme <= 1.1.2 - Local File Inclusion vulnerability
- jwsthemes Issabella
- File inclusion
Not analysed yet 6 Jan 2026
CVE-2025-69087 CVE record

CVSS 8.1 High

WordPress FreeAgent theme <= 2.1.2 - Local File Inclusion vulnerability
- jwsthemes FreeAgent
- File inclusion
Not analysed yet 5 Jan 2026
CVE-2025-62753 CVE record

CVSS 7.5 High

WordPress MAS Videos plugin <= 1.3.4 - Local File Inclusion vulnerability
- MadrasThemes MAS Videos
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-69034 CVE record

CVSS 8.1 High

WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability
- Mikado-Themes Lekker
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-68996 CVE record

CVSS 7.5 High

WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability
- WebCodingPlace Responsive Posts Carousel Pro
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-68987 CVE record

CVSS 7.5 High

WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability
- Edge-Themes Cinerama
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-68985 CVE record

CVSS 7.5 High

WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability
- thembay Aora
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-68984 CVE record

CVSS 7.5 High

WordPress Puca theme <= 2.6.39 - Local File Inclusion vulnerability
- thembay Puca
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-68983 CVE record

CVSS 7.5 High

WordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerability
- thembay Greenmart
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-68974 CVE record

CVSS 6.6 Medium

WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability
- miniOrange WordPress Social Login and Register
- File inclusion
Not analysed yet 30 Dec 2025
CVE-2025-68870 CVE record

CVSS 7.5 High

WordPress CookieHint WP plugin <= 1.0.0 - Local File Inclusion vulnerability
- reDim GmbH CookieHint WP
- File inclusion
Not analysed yet 29 Dec 2025
CVE-2025-68877 CVE record

CVSS 7.5 High

WordPress CedCommerce Integration for Good Market plugin <= 1.0.6 - Local File Inclusion vulnerability
- CedCommerce Integration for Good Market
- File inclusion
Not analysed yet 29 Dec 2025
CVE-2025-68506 CVE record

CVSS 8.1 High

WordPress Docket Cache plugin <= 24.07.03 - Local File Inclusion vulnerability
- Nawawi Jamili Docket Cache
- File inclusion
Not analysed yet 24 Dec 2025
CVE-2025-68563 CVE record

CVSS 7.5 High

WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion vulnerability
- WP Shuffle Subscribe to Unlock Lite
- File inclusion
Not analysed yet 24 Dec 2025
CVE-2025-68540 CVE record

CVSS 7.5 High

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability
- thembay Fana
- File inclusion
Not analysed yet 24 Dec 2025
CVE-2025-68537 CVE record

CVSS 7.5 High

WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability
- thembay Zota
- File inclusion
Not analysed yet 24 Dec 2025
CVE-2025-68530 CVE record

CVSS 7.5 High

WordPress Bookory theme <= 2.2.7 - Local File Inclusion vulnerability
- pavothemes Bookory
- File inclusion
Not analysed yet 24 Dec 2025
CVE-2021-47734 CVE record

CVSS 8.6 High

CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution
- CMSimple
- File inclusion
Not analysed yet 23 Dec 2025
CVE-2025-68546 CVE record

CVSS 7.5 High

WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability
- thembay Nika
- File inclusion
Not analysed yet 23 Dec 2025
CVE-2025-68544 CVE record

CVSS 7.5 High

WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability
- thembay Diza
- File inclusion
Not analysed yet 23 Dec 2025
CVE-2025-68560 CVE record

CVSS 7.5 High

WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerability
- CodexThemes TheGem Theme Elements (for Elementor)
- File inclusion
Not analysed yet 23 Dec 2025
CVE-2025-68645 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFil…
- File inclusion
Not analysed yet 22 Dec 2025
CVE-2025-13641 CVE record

CVSS 8.8 High

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'
- smub Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
- File inclusion
Not analysed yet 18 Dec 2025
CVE-2025-64377 CVE record

CVSS 8.1 High

WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability
- CridioStudio ListingPro
- File inclusion
Not analysed yet 18 Dec 2025
CVE-2025-64373 CVE record

CVSS 8.1 High

WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability
- shinetheme Traveler
- File inclusion
Not analysed yet 18 Dec 2025
CVE-2025-64223 CVE record

CVSS 8.1 High

WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability
- PenciDesign PenNews
- File inclusion
Not analysed yet 18 Dec 2025
CVE-2025-64205 CVE record

CVSS 8.1 High

WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability
- TieLabs Jannah
- File inclusion
Not analysed yet 18 Dec 2025
CVE-2025-64193 CVE record

CVSS 7.5 High

WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability
- 8theme XStore
- File inclusion
Not analysed yet 18 Dec 2025