CVE-2025-52732 WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 GMap Targeting gmap-targeting allows PHP Local File Inclusion.This issue affects GMap Targeting: from n/a through = 1.1.6...

CVE-2025-52806

CVE-2025-52806 affects the WordPress plugin “JobSearch” (WP Job Board) up to version 2.9.0. It is a Local File Inclusion due to improper filename handling in PHP, enabling inclusion of local files. Public sources indicate the vulnerability is currently unpatched for affected releases and patches ...

CVE-2025-52806 WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in eyecix JobSearch wp-jobsearch allows PHP Local File Inclusion.This issue affects JobSearch: from n/a through 3.0.8...

PT-2025-33166 · Stmcan · Rt-Theme 18 | Extensions

Name of the Vulnerable Software and Affected Versions: stmcan RT-Theme 18 | Extensions versions through 2.4 Description: An Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' issue exists in stmcan RT-Theme 18 | Extensions, allowing PHP Local File Inclusion...

PT-2025-33253

Name of the Vulnerable Software and Affected Versions: ThemeMove Unicamp versions through 2.6.3 Description: This issue involves an improper control of filename for include/require statements in a PHP program, leading to a PHP Local File Inclusion. Recommendations: Update ThemeMove Unicamp to a...

PT-2025-33206 · WordPress · Acato Wp Rest Cache

Name of the Vulnerable Software and Affected Versions: Acato WP REST Cache versions n/a through 2025.1.0 Description: Acato WP REST Cache is susceptible to a PHP Local File Inclusion due to an Improper Control of Filename for Include/Require Statement. This allows for the inclusion of local files...

PT-2025-33152 · Unknown · Beeteam368 Extensions

Name of the Vulnerable Software and Affected Versions: BeeTeam368 Extensions versions through 1.9.4 Description: BeeTeam368 Extensions is susceptible to a PHP Local File Inclusion due to an Improper Control of Filename for Include/Require Statement. This allows for the inclusion of local files...

PT-2025-33149 · Wp Royal Themes · News Magazine X

Name of the Vulnerable Software and Affected Versions: WP Royal Themes News Magazine X versions through 1.2.37 Description: A flaw exists in WP Royal Themes News Magazine X related to improper control of filename for include/require statements, leading to a PHP Local File Inclusion issue. This...

WordPress plugin Xinterio 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-33242 · Themestek · Xinterio

Name of the Vulnerable Software and Affected Versions: Xinterio versions through 4.2 Description: An Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability exists in themeStek Xinterio, allowing PHP Local File Inclusion. Recommendations...

WordPress plugin Urna 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Geo Mashup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33195 · Unknown · Cloud Saml Sso - Single Sign On Login

Name of the Vulnerable Software and Affected Versions: Cloud SAML SSO - Single Sign On Login versions through 1.0.18 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File...

WordPress plugin Gutenberg Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin WP REST Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

WordPress plugin GravityWP - Merge Tags 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress plugin Premium Addons for KingComposer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-27937 · WordPress · Kossy - Minimalist Ecommerce Wordpress Theme

Name of the Vulnerable Software and Affected Versions: Kossy - Minimalist eCommerce WordPress Theme versions 1.45 and earlier Description: The issue affects the Kossy - Minimalist eCommerce WordPress Theme due to improper control of filename for include/require statement in PHP program, allowing...

WordPress plugin Kossy 安全漏洞

Kossy is a WordPress theme designed for e-commerce with a minimalist style for furniture stores, clothing stores, digital product stores and other scenarios. WordPress Kossy has a file inclusion vulnerability, the vulnerability stems from improper file name control in the PHP program, an attacker...

CVE-2025-52808

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in real-web RealtyElite realtyelite allows PHP Local File Inclusion.This issue affects RealtyElite: from n/a through = 1.0.0...