21087 matches found
PT-2025-33970 · Unknown · Ovatheme Eventlist
Name of the Vulnerable Software and Affected Versions: ovatheme eventlist versions through 1.9.2 Description: This issue involves an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion, in ovatheme eventlist. This allows for PHP Local File...
VulnCheck KEV: CVE-2024-9193
The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the whmpressdomainsearchajaxextendedresults function. This makes it possible for unauthenticated attackers to include and execute...
PT-2025-33919 · Caliris +1 · Caliris +1
Name of the Vulnerable Software and Affected Versions: Caliris versions not specified through 1.5 Description: This issue involves an improper control of filename for include/require statements in PHP programs, specifically a PHP Local File Inclusion in CocoBasic Caliris. Recommendations: At the...
PT-2025-33987 · Unknown · Nk Ghost Kit
Name of the Vulnerable Software and Affected Versions: nK Ghost Kit versions through 3.4.1 Description: This issue involves improper control of filename handling for Include/Require statements in PHP programs, specifically a PHP Remote File Inclusion vulnerability that allows for PHP Local File...
PT-2025-33931 · Roxnor · Roxnor Fundengine
Name of the Vulnerable Software and Affected Versions: Roxnor FundEngine versions through 1.7.4 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion...
PT-2025-34339 · Undefined · Undefined
CVE-2025-57748 - Apache HTTP Server Local File Inclusion CVE ID : CVE-2025-57748 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2025-34024 · Unknown · Funnelkit Funnel Builder
Name of the Vulnerable Software and Affected Versions: FunnelKit Funnel Builder versions through 3.11.1 Description: This issue involves an improper control of filename for include/require statements in PHP programs, specifically a PHP Local File Inclusion vulnerability within FunnelKit Funnel...
PT-2025-34006 · Unknown · Tobias Cf7 Wow Styler
Name of the Vulnerable Software and Affected Versions: Saleswonder Team Tobias CF7 WOW Styler versions through 1.7.2 Description: The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion issue. This allows for PHP Local...
PT-2025-33927 · Censtore · Censtore
Name of the Vulnerable Software and Affected Versions: Cena Store versions through 2.11.26 Description: An improper control of filename for include/require statement issue, also known as a PHP Remote File Inclusion, exists in Cena Store. This allows for PHP Local File Inclusion. Recommendations:...
PT-2025-34001 · Unknown · Cozmoslabs Paid Member Subscriptions
Name of the Vulnerable Software and Affected Versions: Cozmoslabs Paid Member Subscriptions versions through 2.15.4 Description: The software contains an improper control of filename for include/require statements, leading to a PHP local file inclusion issue. Recommendations: Update Cozmoslabs Pa...
PT-2025-33930 · WordPress · Seopress For Mainwp
Name of the Vulnerable Software and Affected Versions: SEOPress for MainWP versions through 1.4 Description: This issue involves improper control of filename handling for include/require statements in the PHP program, leading to a PHP Local File Inclusion. Recommendations: Update SEOPress for...
PT-2025-33974 · WordPress · Zoloblocks
Name of the Vulnerable Software and Affected Versions: bdthemes ZoloBlocks versions through 2.3.2 Description: An improper control of filename for include/require statement exists in bdthemes ZoloBlocks, allowing for PHP Local File Inclusion. This issue is related to a PHP Remote File Inclusion...
PT-2025-34007 · Unknown · Schiocco Support Board
Name of the Vulnerable Software and Affected Versions: Schiocco Support Board versions through 3.8.0 Description: The software contains an improper control of filename for include/require statements, leading to a PHP local file inclusion issue. Recommendations: Versions prior to 3.8.0 are affecte...
PT-2025-33912 · Dedalx · Cook&Meal
Name of the Vulnerable Software and Affected Versions: dedalx Cook&Meal versions through 1.2.3 Description: This issue involves improper control of filename handling for include/require statements in the PHP program, leading to a PHP Local File Inclusion. Recommendations: Update to a version late...
WordPress Sala Theme <= 1.1.6 is vulnerable to Local File Inclusion
Software Sala Type Theme Vulnerable versions = 1.1.6 Fixed in 1.1.7 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-54709 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 734caf3a58cf Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...
WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Funnel Builder by FunnelKit versions = 3.11.1...
WordPress Basil theme <= 1.3.12 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Basil versions = 1.3.12...
WordPress Fabric theme <= 1.5.0 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Fabric versions = 1.5.0...