Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2024-54263 CVE record

CVSS 7.5 High

WordPress Spirit Framework plugin <= 1.2.13 - Local File Inclusion vulnerability
- Talemy Spirit Framework
- File inclusion
Not analysed yet 2 Feb 2026
CVE-2021-47900 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Gila CMS < 2.0.0 - Remote Code Execution
- Gila CMS
- File inclusion
Not analysed yet 27 Jan 2026
CVE-2026-1257 CVE record

CVSS 7.5 High

Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute
- shazdeh Administrative Shortcodes
- File inclusion
Not analysed yet 24 Jan 2026
CVE-2026-24635 CVE record

CVSS 7.5 High

WordPress EduBlink Core plugin <= 2.0.7 - Local File Inclusion vulnerability
- DevsBlink EduBlink Core
- File inclusion
Not analysed yet 23 Jan 2026
CVE-2026-24609 CVE record

CVSS 7.5 High

WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability
- Elated-Themes Laurent
- File inclusion
Not analysed yet 23 Jan 2026
CVE-2026-24608 CVE record

CVSS 7.5 High

WordPress Laurent Core plugin <= 2.4.1 - Local File Inclusion vulnerability
- Elated-Themes Laurent Core
- File inclusion
Not analysed yet 23 Jan 2026
CVE-2026-24538 CVE record

CVSS 7.5 High

WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability
- Omnipress
- File inclusion
Not analysed yet 23 Jan 2026
CVE-2026-24531 CVE record

CVSS 7.5 High

WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability
- Select-Themes Prowess
- File inclusion
Not analysed yet 23 Jan 2026
CVE-2026-24390 CVE record

CVSS 7.5 High

WordPress Kentha Elementor Widgets plugin < 3.1 - Local File Inclusion vulnerability
- QantumThemes Kentha Elementor Widgets
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2026-23978 CVE record

CVSS 7.5 High

WordPress Gyan Elements plugin <= 2.2.1 - Local File Inclusion vulnerability
- Softwebmedia Gyan Elements
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2026-23975 CVE record

CVSS 7.5 High

WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability
- uxper Golo
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2026-22464 CVE record

CVSS 7.5 High

WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability
- wphocus My auctions allegro
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2026-22402 CVE record

CVSS 7.5 High

WordPress Triply theme <= 2.4.7 - Local File Inclusion vulnerability
- pavothemes Triply
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2026-22401 CVE record

CVSS 7.5 High

WordPress Freshio theme <= 2.4.2 - Local File Inclusion vulnerability
- pavothemes Freshio
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69314 CVE record

CVSS 8.1 High

WordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability
- fuelthemes Werkstatt
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69100 CVE record

CVSS 8.1 High

WordPress North theme <= 5.7.5 - Local File Inclusion vulnerability
- fuelthemes North
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69078 CVE record

CVSS 8.1 High

WordPress Malta theme <= 1.3.3 - Local File Inclusion vulnerability
- AncoraThemes Malta
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69077 CVE record

CVSS 8.1 High

WordPress Hobo theme <= 1.0.10 - Local File Inclusion vulnerability
- AncoraThemes Hobo
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69076 CVE record

CVSS 8.1 High

WordPress Modern Housewife theme <= 1.0.12 - Local File Inclusion vulnerability
- AncoraThemes Modern Housewife
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69075 CVE record

CVSS 8.1 High

WordPress Yolox theme <= 1.0.15 - Local File Inclusion vulnerability
- AncoraThemes Yolox
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69074 CVE record

CVSS 8.1 High

WordPress Pearson Specter theme <= 1.11.3 - Local File Inclusion vulnerability
- AncoraThemes Pearson Specter
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69073 CVE record

CVSS 8.1 High

WordPress Piqes theme <= 1.0.11 - Local File Inclusion vulnerability
- AncoraThemes Piqes
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69072 CVE record

CVSS 8.1 High

WordPress Prider theme <= 1.1.3.1 - Local File Inclusion vulnerability
- AncoraThemes Prider
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69071 CVE record

CVSS 8.1 High

WordPress TanTum theme <= 1.1.13 - Local File Inclusion vulnerability
- AncoraThemes TanTum
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69070 CVE record

CVSS 8.1 High

WordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability
- AncoraThemes Tornados
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69068 CVE record

CVSS 8.1 High

WordPress Muji theme <= 1.2.0 - Local File Inclusion vulnerability
- AncoraThemes Muji
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69067 CVE record

CVSS 8.1 High

WordPress Tails theme <= 1.4.12 - Local File Inclusion vulnerability
- AncoraThemes Tails
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69066 CVE record

CVSS 8.1 High

WordPress Indoor Plants theme <= 1.2.7 - Local File Inclusion vulnerability
- AncoraThemes Indoor Plants
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69065 CVE record

CVSS 8.1 High

WordPress Snow Mountain theme <= 1.4.3 - Local File Inclusion vulnerability
- AncoraThemes Snow Mountain
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69064 CVE record

CVSS 8.1 High

WordPress Pets Land theme <= 1.2.8 - Local File Inclusion vulnerability
- AncoraThemes Pets Land
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69062 CVE record

CVSS 8.1 High

WordPress Weedles theme <= 1.1.12 - Local File Inclusion vulnerability
- AncoraThemes Weedles
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69061 CVE record

CVSS 8.1 High

WordPress MoveMe theme <= 1.2.15 - Local File Inclusion vulnerability
- AncoraThemes MoveMe
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69060 CVE record

CVSS 8.1 High

WordPress uReach theme <= 1.3.3 - Local File Inclusion vulnerability
- AncoraThemes uReach
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69059 CVE record

CVSS 8.1 High

WordPress DiveIt theme <= 1.4.3 - Local File Inclusion vulnerability
- AncoraThemes DiveIt
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69058 CVE record

CVSS 8.1 High

WordPress PartyMaker theme <= 1.1.15 - Local File Inclusion vulnerability
- AncoraThemes PartyMaker
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69057 CVE record

CVSS 8.1 High

WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability
- Edge-Themes Eldon
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69050 CVE record

CVSS 8.1 High

WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability
- Edge-Themes Overworld
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69049 CVE record

CVSS 8.1 High

WordPress Töbel theme <= 1.6 - Local File Inclusion vulnerability
- Elated-Themes Töbel
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69047 CVE record

CVSS 8.1 High

WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability
- magentech MaxShop
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69046 CVE record

CVSS 8.1 High

WordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability
- WebGeniusLab iRecco Core
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69044 CVE record

CVSS 8.1 High

WordPress Vango theme <= 1.3.3 - Local File Inclusion vulnerability
- goalthemes Vango
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69043 CVE record

CVSS 8.1 High

WordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability
- goalthemes Rashy
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69042 CVE record

CVSS 8.1 High

WordPress Lindo theme <= 1.2.5 - Local File Inclusion vulnerability
- goalthemes Lindo
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69041 CVE record

CVSS 8.1 High

WordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability
- goalthemes Dekoro
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69040 CVE record

CVSS 8.1 High

WordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability
- goalthemes Bfres
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69039 CVE record

CVSS 8.1 High

WordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability
- goalthemes Bailly
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69038 CVE record

CVSS 8.1 High

WordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability
- goalthemes Hyori
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69037 CVE record

CVSS 8.1 High

WordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability
- goalthemes Pippo
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69005 CVE record

CVSS 8.1 High

WordPress Search & Go theme <= 2.8 - Local File Inclusion vulnerability
- Elated-Themes Search & Go
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-69004 CVE record

CVSS 8.1 High

WordPress Bajaar - Highly Customizable WooCommerce WordPress Theme theme <= 2.1.0 - Local File Inclusion vulnerability
- XpeedStudio Bajaar - Highly Customizable WooCommerce WordPress Theme
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-68913 CVE record

CVSS 7.5 High

WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability
- zozothemes Miion
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-68908 CVE record

CVSS 8.1 High

WordPress Barberry theme <= 2.9.9.87 - Local File Inclusion vulnerability
- temash Barberry
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-68905 CVE record

CVSS 7.5 High

WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
- jegtheme JNews - Pay Writer
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-68510 CVE record

CVSS 8.1 High

WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability
- ThemeGoods Photography
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67957 CVE record

CVSS 8.1 High

WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability
- TangibleWP Listivo Core
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67955 CVE record

CVSS 7.5 High

WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability
- TangibleWP MyHome Core
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67946 CVE record

CVSS 8.1 High

WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability
- scriptsbundle AdForest
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67941 CVE record

CVSS 8.1 High

WordPress The Aisle theme < 2.9.1 - Local File Inclusion vulnerability
- Elated-Themes The Aisle
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67940 CVE record

CVSS 8.1 High

WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability
- Mikado-Themes Powerlift
- File inclusion
Not analysed yet 22 Jan 2026
CVE-2025-67938 CVE record

CVSS 8.1 High

WordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability
- Mikado-Themes Biagiotti
- File inclusion
Not analysed yet 22 Jan 2026