CVE-2025-60078 WordPress Task Manager plugin <= 3.0.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Agence web Eoxia – Montpellier Task Manager task-manager allows PHP Local File Inclusion.This issue affects Task Manager: from n/a through = 3.0.2...

CVE-2025-60076 WordPress Ray Enterprise Translation plugin <= 1.7.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Jiro Sasamoto Ray Enterprise Translation lingotek-translation allows PHP Local File Inclusion.This issue affects Ray Enterprise Translation: from n/a through = 1.7.1...

CVE-2025-60071

CVE-2025-60071 describes a Local File Inclusion in the WordPress plugin/theme pair “Riode | Multi-Purpose WooCommerce” (WordPress/Riode) due to improper filename handling in include/require for PHP. Affected: Riode ≤ 1.6.23. The vulnerability enables PHP Local File Inclusion; impact and CVSS metr...

CVE-2025-60069 WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MinimogWP minimog allows PHP Local File Inclusion.This issue affects MinimogWP: from n/a through = 3.9.6...

CVE-2025-60067

CVE-2025-60067 is a local/file inclusion vulnerability in the WordPress Giardino theme (versions &lt;= 1.1.10). The issue is described as Improper Control of Filename for Include/Require Statement in PHP, enabling PHP Local File Inclusion. Affected product/component: WordPress Giardino theme; roo...

CVE-2025-60072

CVE-2025-60072 affects the WordPress plugin Anchor smooth scroll, versions

CVE-2025-60069 WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MinimogWP minimog allows PHP Local File Inclusion.This issue affects MinimogWP: from n/a through = 3.9.6...

CVE-2025-60069

CVE-2025-60069 concerns the WordPress MinimogWP theme (minimog) up to version 3.9.6. The issue is an improper control of filenames for include/require statements, enabling PHP Local File Inclusion (LFI) via the theme’s code. The vulnerability is described as a PHP Local File Inclusion in MinimogW...

CVE-2025-60063 WordPress Rosalinda theme <= 1.2.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Rosalinda rosalinda allows PHP Local File Inclusion.This issue affects Rosalinda: from n/a through = 1.2.3...

CVE-2025-60065 WordPress Pinevale theme <= 1.0.14 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Pinevale pinevale allows PHP Local File Inclusion.This issue affects Pinevale: from n/a through = 1.0.14...

CVE-2025-60064

CVE-2025-60064 describes a PHP Local File Inclusion in the WordPress Renewal theme (versions &lt;= 1.2.2) due to improper control of filenames for include/require. The issue affects Renewal; CVSS 3.1 base score 8.1 (HIGH) with network attack vector, no privileges required, user interaction requir...

CVE-2025-60066

CVE-2025-60066 affects the WordPress Katelyn theme ≤ 1.0.10. The issue is an improper control of filenames for Include/Require in PHP, enabling Local File Inclusion. The description consistently specifies this vulnerability as a Local File Inclusion risk in Katelyn and does not provide exploitati...

EUVD-2025-204122

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Rosalinda rosalinda allows PHP Local File Inclusion.This issue affects Rosalinda: from n/a through = 1.2.3...

CVE-2025-60064 WordPress Renewal theme <= 1.2.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Renewal renewal allows PHP Local File Inclusion.This issue affects Renewal: from n/a through = 1.2.2...

CVE-2025-60066 WordPress Katelyn theme <= 1.0.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Katelyn katelyn allows PHP Local File Inclusion.This issue affects Katelyn: from n/a through = 1.0.10...

CVE-2025-60066 WordPress Katelyn theme <= 1.0.10 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Katelyn katelyn allows PHP Local File Inclusion.This issue affects Katelyn: from n/a through = 1.0.10...

CVE-2025-60058 WordPress DetailX theme <= 1.10.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes DetailX detailx allows PHP Local File Inclusion.This issue affects DetailX: from n/a through = 1.10.0...

CVE-2025-60060 WordPress Pubzinne theme <= 1.0.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Pubzinne pubzinne allows PHP Local File Inclusion.This issue affects Pubzinne: from n/a through = 1.0.12...

CVE-2025-60057

CVE-2025-60057 corresponds to a Local File Inclusion vulnerability in the WordPress DJ Rainflow theme (

CVE-2025-60060

CVE-2025-60060 pertains to a PHP Local File Inclusion in the WordPress Pubzinne theme (versions up to and including 1.0.12). The root cause is improper control of filenames for include/require statements, enabling local file inclusion through the plugin/theme code. Affected product: Pubzinne Word...