Lucene search
+L

2248 matches found

Cvelist
Cvelist
added 2026/01/08 9:17 a.m.38 views

CVE-2025-12549 WordPress Rozy - Flower Shop theme <= 1.2.25 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magentech Rozy - Flower Shop rozy allows PHP Local File Inclusion.This issue affects Rozy - Flower Shop: from n/a through = 1.2.25...

8.1CVSS0.00532EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/08 3:15 a.m.19 views

CVE-2025-69356

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CodexThemes TheGem Theme Elements for Elementor thegem-elements-elementor allows PHP Local File Inclusion.This issue affects TheGem Theme Elements for Elementor: from n/a through...

7.5CVSS7.1AI score0.00337EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/08 3:14 a.m.14 views

CVE-2025-69083

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Frappé frappe allows PHP Local File Inclusion.This issue affects Frappé: from n/a through = 1.8...

8.1CVSS5.9AI score0.0034EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.6 views

PT-2026-1696

Name of the Vulnerable Software and Affected Versions magentech Rozy - Flower Shop versions through 1.2.25 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion ...

9.8CVSS6.5AI score0.00532EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.4 views

WordPress plugin Atlas 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS6.6AI score0.00532EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.6 views

WordPress plugin Moody 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS6.6AI score0.00532EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.7 views

WordPress plugin Mitech 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS6.6AI score0.00532EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.13 views

PT-2026-1785

Name of the Vulnerable Software and Affected Versions ThemeMove Moody tm-moody versions through 2.7.3 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of...

9.8CVSS6.5AI score0.00532EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.5 views

WordPress plugin Typify 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS6.6AI score0.00532EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.9 views

PT-2026-1740

Name of the Vulnerable Software and Affected Versions ThemeMove Brook - Agency Business Creative versions through 2.8.9 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for t...

9.8CVSS6.4AI score0.00419EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.14 views

PT-2026-1909

Name of the Vulnerable Software and Affected Versions Mikado-Themes Wellspring versions prior to 2.8 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Local File Inclusion. This allows for the inclusion of local files. The...

8.1CVSS6.4AI score0.00442EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.8 views

PT-2026-1739

Name of the Vulnerable Software and Affected Versions ThemeMove AeroLand versions through 1.6.6 Description The software contains an Improper Control of Filename for Include/Require Statement issue, specifically a PHP Local File Inclusion. This allows for the inclusion of local files within the...

9.8CVSS6.4AI score0.00419EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.11 views

PT-2026-1784

Name of the Vulnerable Software and Affected Versions TMRW-studio Atlas versions through 2.1.0 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. Recommendation...

9.8CVSS6.7AI score0.00532EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.10 views

PT-2026-1787

Name of the Vulnerable Software and Affected Versions QantumThemes Typify versions through 3.0.2 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. The vulnerability exists in QantumThemes...

9.8CVSS6.7AI score0.00532EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/07 11:59 a.m.4 views

CVE-2025-69080 WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through = 1.9.8...

8.1CVSS5.8AI score0.00419EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/07 11:59 a.m.38 views

CVE-2025-69080 WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through = 1.9.8...

8.1CVSS0.00419EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/07 11:56 a.m.1 views

CVE-2025-69081 WordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Hope charity-is-hope allows PHP Local File Inclusion.This issue affects Hope: from n/a through = 3.0.0...

8.1CVSS5.8AI score0.00419EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/07 11:56 a.m.19 views

CVE-2025-69081

CVE-2025-69081 describes an Improper Control of Filename for Include/Require in PHP (PHP Local File Inclusion) affecting ThemeREX Group Hope charity-is-hope WordPress theme (Hope: from n/a through 3.0.0). Affected component is the PHP include/require path handling in the theme. The Red Hat entry ...

8.1CVSS5.9AI score0.00419EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.7 views

PT-2026-1646

Name of the Vulnerable Software and Affected Versions Hope versions through 3.0.0 Description The software contains an Improper Control of Filename for Include/Require Statement issue, specifically a PHP Local File Inclusion. The vulnerable component allows for the inclusion of local files...

8.1CVSS6.5AI score0.00419EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/06 5:34 p.m.46 views

CVE-2025-32304

CVE-2025-32304 : WPCHURCH (WordPress plugin)

8.1CVSS8.7AI score0.00425EPSS
SaveExploits0References1
Rows per page
Query Builder