Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-22380 CVE record

CVSS 8.1 High

WordPress UnlimHost theme <= 1.2.3 - Local File Inclusion vulnerability
- AncoraThemes UnlimHost
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22379 CVE record

CVSS 8.1 High

WordPress Netmix theme <= 1.0.10 - Local File Inclusion vulnerability
- AncoraThemes Netmix
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22378 CVE record

CVSS 8.1 High

WordPress Blabber theme <= 1.7.0 - Local File Inclusion vulnerability
- AncoraThemes Blabber
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22377 CVE record

CVSS 8.1 High

WordPress Saveo theme <= 1.1.2 - Local File Inclusion vulnerability
- AncoraThemes Saveo
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22376 CVE record

CVSS 8.1 High

WordPress Parkivia theme <= 1.1.9 - Local File Inclusion vulnerability
- AncoraThemes Parkivia
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22375 CVE record

CVSS 8.1 High

WordPress Impacto Patronus theme <= 1.2.3 - Local File Inclusion vulnerability
- AncoraThemes Impacto Patronus
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22374 CVE record

CVSS 8.1 High

WordPress Zio Alberto theme <= 1.2.2 - Local File Inclusion vulnerability
- AncoraThemes Zio Alberto
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22373 CVE record

CVSS 8.1 High

WordPress Fooddy theme <= 1.3.10 - Local File Inclusion vulnerability
- AncoraThemes Fooddy
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22372 CVE record

CVSS 8.1 High

WordPress Isida theme <= 1.4.2 - Local File Inclusion vulnerability
- AncoraThemes Isida
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22371 CVE record

CVSS 8.1 High

WordPress Gustavo theme <= 1.2.2 - Local File Inclusion vulnerability
- AncoraThemes Gustavo
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22370 CVE record

CVSS 8.1 High

WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability
- axiomthemes Marveland
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22369 CVE record

CVSS 8.1 High

WordPress Ironfit theme <= 1.5 - Local File Inclusion vulnerability
- AncoraThemes Ironfit
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22368 CVE record

CVSS 8.1 High

WordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability
- axiomthemes Redy
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22367 CVE record

CVSS 8.1 High

WordPress Coworking theme <= 1.6.1 - Local File Inclusion vulnerability
- AncoraThemes Coworking
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22366 CVE record

CVSS 8.1 High

WordPress Jude theme <= 1.3.0 - Local File Inclusion vulnerability
- axiomthemes Jude
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22365 CVE record

CVSS 8.1 High

WordPress Soleng theme <= 1.0.5 - Local File Inclusion vulnerability
- axiomthemes Soleng
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22364 CVE record

CVSS 8.1 High

WordPress SevenTrees theme <=1.0.2 - Local File Inclusion vulnerability
- axiomthemes SevenTrees
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22363 CVE record

CVSS 8.1 High

WordPress Rhodos theme <= 1.3.3 - Local File Inclusion vulnerability
- axiomthemes Rhodos
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22362 CVE record

CVSS 8.1 High

WordPress Photolia theme <= 1.0.3 - Local File Inclusion vulnerability
- axiomthemes Photolia
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22361 CVE record

CVSS 8.1 High

WordPress A-Mart theme <= 1.0.2 - Local File Inclusion vulnerability
- axiomthemes A-Mart
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22356 CVE record

CVSS 7.5 High

WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability
- Automattic Jetpack CRM
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-22344 CVE record

CVSS 8.1 High

WordPress FiveStar theme <= 1.7 - Local File Inclusion vulnerability
- Mikado-Themes FiveStar
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69410 CVE record

CVSS 8.1 High

WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability
- Edge-Themes Belletrist
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69409 CVE record

CVSS 8.1 High

WordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability
- axiomthemes PJ | Life & Business Coaching
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69408 CVE record

CVSS 8.1 High

WordPress HealthFirst theme <= 1.0.1 - Local File Inclusion vulnerability
- Mikado-Themes HealthFirst
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69407 CVE record

CVSS 8.1 High

WordPress Struktur theme <= 2.5.1 - Local File Inclusion vulnerability
- Select-Themes Struktur
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69406 CVE record

CVSS 8.1 High

WordPress FreightCo theme <= 1.1.7 - Local File Inclusion vulnerability
- ThemeREX FreightCo
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69402 CVE record

CVSS 8.1 High

WordPress R&F theme <= 1.5 - Local File Inclusion vulnerability
- ThemeREX R&F
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69400 CVE record

CVSS 8.1 High

WordPress Yokoo theme <= 1.1.11 - Local File Inclusion vulnerability
- ThemeREX Yokoo
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69399 CVE record

CVSS 8.1 High

WordPress Cobble theme <= 1.7 - Local File Inclusion vulnerability
- ThemeREX Cobble
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69398 CVE record

CVSS 8.1 High

WordPress Plank theme <= 1.7 - Local File Inclusion vulnerability
- ThemeREX Plank
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69397 CVE record

CVSS 8.1 High

WordPress Tint theme <= 1.7 - Local File Inclusion vulnerability
- ThemeREX Tint
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69396 CVE record

CVSS 8.1 High

WordPress Splendour theme <= 1.23 - Local File Inclusion vulnerability
- ThemeREX Splendour
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69395 CVE record

CVSS 8.1 High

WordPress Gable theme <= 1.5 - Local File Inclusion vulnerability
- ThemeREX Gable
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69387 CVE record

CVSS 7.5 High

WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability
- whatwouldjessedo Simple Retail Menus
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69383 CVE record

CVSS 7.5 High

WordPress WP shop plugin <= 2.6.1 - Local File Inclusion vulnerability
- Agence web Eoxia - Montpellier WP shop
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69375 CVE record

CVSS 8.1 High

WordPress Portfolio Builder plugin <= 1.2.5 - Local File Inclusion vulnerability
- SolverWp Portfolio Builder
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69374 CVE record

CVSS 8.1 High

WordPress Eleblog – Elementor Blog And Magazine Addons plugin <= 2.0.3 - Local File Inclusion vulnerability
- SolverWp Eleblog – Elementor Blog And Magazine Addons
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69373 CVE record

CVSS 7.5 High

WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File Inclusion vulnerability
- beeteam368 VidoRev
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-69322 CVE record

CVSS 8.1 High

WordPress PeakShops theme < 1.5.9 - Local File Inclusion vulnerability
- fuelthemes PeakShops
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-68841 CVE record

CVSS 7.5 High

WordPress TopperPack – Complete Elementor Addons, theme & CPT Builder plugin <= 1.2.1 - Local File Inclusion vulnerability
- Themepul TopperPack – Complete Elementor Addons, Theme & CPT Builder
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-68552 CVE record

CVSS 7.5 High

WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Local File Inclusion vulnerability
- WebCodingPlace WooCommerce Coming Soon Product with Countdown
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-68545 CVE record

CVSS 8.1 High

WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability
- thembay Nika
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-68543 CVE record

CVSS 8.1 High

WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability
- thembay Diza
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-68539 CVE record

CVSS 8.1 High

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability
- thembay Fana
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-68536 CVE record

CVSS 8.1 High

WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability
- thembay Zota
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-67992 CVE record

CVSS 8.1 High

WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability
- LoftOcean PatioTime
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-67988 CVE record

CVSS 8.1 High

WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability
- LoftOcean CozyStay
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-67982 CVE record

CVSS 8.1 High

WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability
- thembay Urna
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-67981 CVE record

CVSS 8.1 High

WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability
- thembay Besa
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-67980 CVE record

CVSS 8.1 High

WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability
- thembay Hara
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2025-60087 CVE record

CVSS 8.1 High

WordPress Extensive VC Addons for WPBakery page builder plugin <= 1.9.1 - Local File Inclusion vulnerability
- Nenad Obradovic Extensive VC Addons for WPBakery page builder
- File inclusion
Not analysed yet 20 Feb 2026
CVE-2026-27343 CVE record

CVSS 7.5 High

WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability
- VanKarWai Airtifact
- File inclusion
Not analysed yet 19 Feb 2026
CVE-2026-27052 CVE record

CVSS 7.5 High

WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability
- villatheme Sales Countdown Timer for WooCommerce and WordPress
- File inclusion
Not analysed yet 19 Feb 2026
CVE-2026-25326 CVE record

CVSS 7.5 High

WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability
- CMSMasters Content Composer
- File inclusion
Not analysed yet 19 Feb 2026
CVE-2026-0926 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]
- prodigycommerce Prodigy Commerce
- File inclusion
Not analysed yet 19 Feb 2026
CVE-2026-25548 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

InvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log Poisoning
- InvoicePlane
- Code injection
- File inclusion
Not analysed yet 18 Feb 2026
CVE-2026-1988 CVE record

CVSS 7.5 High

Flexi Product Slider and Grid for WooCommerce <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion via 'theme' Shortcode Attribute
- wpdecent Flexi Product Slider and Grid for WooCommerce
- File inclusion
Not analysed yet 14 Feb 2026
CVE-2025-15368 CVE record

CVSS 8.8 High

SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- themeboy SportsPress – Sports Club & League Manager
- File inclusion
Not analysed yet 4 Feb 2026
CVE-2026-25027 CVE record

CVSS 7.5 High

WordPress Unicamp theme <= 2.7.1 - Local File Inclusion vulnerability
- ThemeMove Unicamp
- File inclusion
Not analysed yet 3 Feb 2026