WordPress MediaFlex Theme <= 1.3.0 is vulnerable to Local File Inclusion

Software MediaFlex Type Theme Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 464e3d98edb3 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress ChainPress Theme <= 1.0.14 is vulnerable to Local File Inclusion

Software ChainPress Type Theme Vulnerable versions = 1.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID dfe4094bf26b Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Laundry City Theme <= 1.2.16 is vulnerable to Local File Inclusion

Software Laundry City Type Theme Vulnerable versions = 1.2.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a4cd7e73d762 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immuni...

WordPress Translang Theme <= 1.1.16 is vulnerable to Local File Inclusion

Software Translang Type Theme Vulnerable versions = 1.1.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID f5cee4143f4e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Insurance Ancora Theme <= 2.10.0 is vulnerable to Local File Inclusion

Software Insurance Ancora Type Theme Vulnerable versions = 2.10.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1ab0620efd72 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...

WordPress Qwery Theme <= 3.4.1 is vulnerable to Local File Inclusion

Software Qwery Type Theme Vulnerable versions = 3.4.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 4514eb2fc301 Credits Bonds Patchstack Alliance Required privilege...

WordPress A.Williams Theme <= 1.3.0 is vulnerable to Local File Inclusion

Software A.Williams Type Theme Vulnerable versions = 1.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID e62a941b1ab1 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Vagabonds Theme <= 1.3.10 is vulnerable to Local File Inclusion

Software Vagabonds Type Theme Vulnerable versions = 1.3.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID e376cc0ee025 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Tantra Theme <= 2.1.0 is vulnerable to Local File Inclusion

Software Tantra Type Theme Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 37cc376eca77 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Heaven11 Theme <= 1.0.9 is vulnerable to Local File Inclusion

Software Heaven11 Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 942d82445c78 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Partiso Theme <= 1.1.12 is vulnerable to Local File Inclusion

Software Partiso Type Theme Vulnerable versions = 1.1.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 435c7d266ffd Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

CVE-2025-58206

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through = 3.2.5...

CVE-2025-9990

The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portaltype parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

Awesome-Bugbounty-Writeups

This is a curated list of bug bounty writeups, specifically focusing on various types of web application vulnerabilities. The repository is organized by vulnerability type, with sections for Cross-Site Scripting XSS, Cross-Site Request Forgery CSRF, Clickjacking, Local File Inclusion LFI, Subdoma...

CVE-2025-58214

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.This issue affects Indutri: from n/a through 1.3.0...

CVE-2025-57889

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 InPost Gallery inpost-gallery allows PHP Local File Inclusion.This issue affects InPost Gallery: from n/a through = 2.1.4.5...

CVE-2025-58206

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through = 3.2.5...

CVE-2025-58206

CVE-2025-58206 is a Local File Inclusion vulnerability in WordPress Theme MaxCoach (affected: versions n/a through 3.2.5; also described as ThemeMove MaxCoach in some sources). The root cause is improper control of the filename used in PHP include/require statements, enabling PHP Local File Inclu...

CVE-2025-58206 WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through = 3.2.5...

CVE-2025-58206 WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through = 3.2.5...