Advisories · Weakness

File inclusion.

A local or remote file included and run by the application. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

wwbn/avideo Packagist

CVSS 8.6 High

AVideo has an Unauthenticated Local File Inclusion in API locale (RCE possible with writable PHP)
- Path traversal
- File inclusion
<=26.0 · no fixed version yet

GHSA-8fw8-q79c-fp9m · CVE-2026-33513 Not analysed yet 20 Mar 2026
CVE-2026-33130 CVE record

CVSS 6.5 Medium

Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)
- louislam uptime-kuma
- File inclusion
- Code injection
Not analysed yet 20 Mar 2026
CVE-2026-22324 CVE record

CVSS 8.1 High

WordPress Melania theme <= 2.5.0 - Local File Inclusion vulnerability
- ThemeREX Melania
- File inclusion
Not analysed yet 20 Mar 2026
CVE-2026-27065 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability
- ThimPress BuilderPress
- File inclusion
Not analysed yet 19 Mar 2026
CVE-2026-27093 CVE record

CVSS 8.1 High

WordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerability
- ovatheme Tripgo
- File inclusion
Not analysed yet 19 Mar 2026
CVE-2026-1463 CVE record

CVSS 8.8 High

Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion
- smub Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
- File inclusion
Not analysed yet 18 Mar 2026
CVE-2026-29858 CVE record

CVSS 7.5 High

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure.
- File inclusion
Not analysed yet 18 Mar 2026
CVE-2026-27894 CVE record

CVSS 8.8 High

LAM has Authenticated Local File Inclusion (LFI) in PDF export
- LDAPAccountManager lam
- File inclusion
Not analysed yet 17 Mar 2026
CVE-2026-32426 CVE record

CVSS 7.5 High

WordPress Medilazar Core plugin < 1.4.7 - Local File Inclusion vulnerability
- themelexus Medilazar Core
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-32401 CVE record

CVSS 7.2 High

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-32400 CVE record

CVSS 7.5 High

WordPress Boldman theme <= 7.7 - Local File Inclusion vulnerability
- ThemetechMount Boldman
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-32393 CVE record

CVSS 7.5 High

WordPress Greenly Theme Addons plugin < 8.2 - Local File Inclusion vulnerability
- Creatives_Planet Greenly Theme Addons
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-32392 CVE record

CVSS 7.5 High

WordPress Greenly theme <= 8.1 - Local File Inclusion vulnerability
- Creatives_Planet Greenly
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-32384 CVE record

CVSS 7.5 High

WordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability
- magepeopleteam WpBookingly
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-32369 CVE record

CVSS 7.5 High

WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability
- RadiusTheme Medilink-Core
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-32364 CVE record

CVSS 7.5 High

WordPress Turbo Manager plugin < 4.0.8 - Local File Inclusion vulnerability
- redqteam Turbo Manager
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-3826 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WellChoose｜IFTOP - Local File Inclusion
- WellChoose IFTOP
- File inclusion
Not analysed yet 11 Mar 2026
CVE-2026-28129 CVE record

CVSS 8.1 High

WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability
- axiomthemes Little Birdies
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28128 CVE record

CVSS 8.1 High

WordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability
- ThemeREX Verse
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28125 CVE record

CVSS 8.1 High

WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability
- AncoraThemes Midi
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28124 CVE record

CVSS 8.1 High

WordPress Notarius theme <= 1.9 - Local File Inclusion vulnerability
- AncoraThemes Notarius
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28123 CVE record

CVSS 8.1 High

WordPress Veil theme <= 1.9 - Local File Inclusion vulnerability
- AncoraThemes Veil
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28121 CVE record

CVSS 8.1 High

WordPress Anderson theme <= 1.4.2 - Local File Inclusion vulnerability
- AncoraThemes Anderson
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28120 CVE record

CVSS 8.1 High

WordPress Dr.Patterson theme <= 1.3.2 - Local File Inclusion vulnerability
- ThemeREX Dr.Patterson
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28119 CVE record

CVSS 8.1 High

WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability
- axiomthemes Nirvana
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28118 CVE record

CVSS 8.1 High

WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability
- axiomthemes Welldone
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28117 CVE record

CVSS 8.1 High

WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability
- axiomthemes smart SEO
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28107 CVE record

CVSS 8.1 High

WordPress Muzicon theme <= 1.9.0 - Local File Inclusion vulnerability
- ThemeREX Muzicon
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28098 CVE record

CVSS 8.1 High

WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability
- ThemeREX Save Life
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28097 CVE record

CVSS 8.1 High

WordPress Artrium theme <= 1.0.14 - Local File Inclusion vulnerability
- ThemeREX Artrium
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28096 CVE record

CVSS 8.1 High

WordPress WealthCo theme <= 2.18 - Local File Inclusion vulnerability
- ThemeREX WealthCo
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28095 CVE record

CVSS 8.1 High

WordPress Marcell theme <= 1.2.14 - Local File Inclusion vulnerability
- ThemeREX Marcell
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28094 CVE record

CVSS 8.1 High

WordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability
- ThemeREX RexCoin
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28093 CVE record

CVSS 8.1 High

WordPress Ozisti theme <= 1.1.10 - Local File Inclusion vulnerability
- ThemeREX Ozisti
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28092 CVE record

CVSS 8.1 High

WordPress Sounder theme <= 1.3.11 - Local File Inclusion vulnerability
- ThemeREX Sounder
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28091 CVE record

CVSS 8.1 High

WordPress Coleo theme <= 1.1.7 - Local File Inclusion vulnerability
- ThemeREX Coleo
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28090 CVE record

CVSS 8.1 High

WordPress Gamezone theme <= 1.1.11 - Local File Inclusion vulnerability
- ThemeREX Gamezone
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28089 CVE record

CVSS 8.1 High

WordPress Daiquiri theme <= 1.2.4 - Local File Inclusion vulnerability
- ThemeREX Daiquiri
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28088 CVE record

CVSS 8.1 High

WordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability
- ThemeREX Aqualots
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28087 CVE record

CVSS 8.1 High

WordPress Filmax theme <= 1.1.11 - Local File Inclusion vulnerability
- ThemeREX Filmax
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28086 CVE record

CVSS 8.1 High

WordPress Run Gran theme <= 2.0 - Local File Inclusion vulnerability
- ThemeREX Run Gran
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28085 CVE record

CVSS 8.1 High

WordPress Mahogany theme <= 2.9 - Local File Inclusion vulnerability
- ThemeREX Mahogany
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28084 CVE record

CVSS 8.1 High

WordPress Bazinga theme <= 1.1.9 - Local File Inclusion vulnerability
- ThemeREX Bazinga
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28081 CVE record

CVSS 8.1 High

WordPress Windsor theme <= 2.5.0 - Local File Inclusion vulnerability
- ThemeREX Windsor
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28079 CVE record

CVSS 8.1 High

WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability
- axiomthemes Conquerors
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28077 CVE record

CVSS 8.1 High

WordPress Vapester theme <= 1.1.10 - Local File Inclusion vulnerability
- ThemeREX Vapester
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28069 CVE record

CVSS 8.1 High

WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability
- ThemeREX Le Truffe
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28068 CVE record

CVSS 8.1 High

WordPress Rhythmo theme <= 1.3.4 - Local File Inclusion vulnerability
- ThemeREX Rhythmo
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28067 CVE record

CVSS 8.1 High

WordPress Bassein theme <= 1.0.15 - Local File Inclusion vulnerability
- ThemeREX Bassein
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28066 CVE record

CVSS 8.1 High

WordPress Legrand theme <= 2.17 - Local File Inclusion vulnerability
- ThemeREX Legrand
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28065 CVE record

CVSS 8.1 High

WordPress Eject theme <= 2.17 - Local File Inclusion vulnerability
- ThemeREX Eject
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28064 CVE record

CVSS 8.1 High

WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerability
- ThemeREX Edge Decor
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28063 CVE record

CVSS 8.1 High

WordPress Asia Garden theme <= 1.3.1 - Local File Inclusion vulnerability
- ThemeREX Asia Garden
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28062 CVE record

CVSS 8.1 High

WordPress Happy Baby theme <= 1.2.12 - Local File Inclusion vulnerability
- ThemeREX Happy Baby
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28061 CVE record

CVSS 8.1 High

WordPress Tiger Claw theme <= 1.1.14 - Local File Inclusion vulnerability
- ThemeREX Tiger Claw
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28060 CVE record

CVSS 8.1 High

WordPress S.King theme <= 1.5.3 - Local File Inclusion vulnerability
- ThemeREX S.King
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28059 CVE record

CVSS 8.1 High

WordPress Dermatology Clinic theme <= 1.4.3 - Local File Inclusion vulnerability
- ThemeREX Dermatology Clinic
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28058 CVE record

CVSS 8.1 High

WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability
- ThemeREX Dixon
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28057 CVE record

CVSS 8.1 High

WordPress Mandala theme <= 2.8 - Local File Inclusion vulnerability
- ThemeREX Mandala
- File inclusion
Not analysed yet 5 Mar 2026
CVE-2026-28056 CVE record

CVSS 8.1 High

WordPress MCKinney's Politics theme <= 1.2.8 - Local File Inclusion vulnerability
- ThemeREX MCKinney's Politics
- File inclusion
Not analysed yet 5 Mar 2026