CVE-2025-32595 WordPress Krowd <= 1.4.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Krowd allows PHP Local File Inclusion. This issue affects Krowd: from n/a through 1.4.1...

CVE-2025-32595

CVE-2025-32595 is a WordPress Krowd (Krowd theme) vulnerability: an unauthenticated Local File Inclusion (LFI) due to improper filtering of local file resource calls in the PHP include/require flow, affecting Krowd up to version 1.4.1. The CVE is linked to Wordfence and CNVD entries that describe...

CVE-2025-32595 WordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in gavias Krowd krowd allows PHP Local File Inclusion.This issue affects Krowd: from n/a through 1.5.0...

CVE-2025-39473

CVE-2025-39473 corresponds to an improper limitation of a pathname to a restricted directory (path traversal) in Seofy Core from WebGeniusLab, enabling PHP Local File Inclusion. Public references in connected sources identify Seofy Core as affected and note the vulnerability affects versions up t...

CVE-2025-39475

CVE-2025-39475 affects the WordPress Arlo plugin/theme up to version 6.0.3, with an unauthenticated path traversal that enables PHP local file inclusion. Public sources indicate this is currently unpatched (per Wordfence details for Arlo ≤ 6.0.3). The CNVD entry describes the same path traversal ...

CVE-2025-39475 WordPress Arlo theme <= 6.0.3 - Local File Inclusion Vulnerability

Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through = 6.0.3...

CVE-2025-39475 WordPress Arlo <= 6.0.3 - Local File Inclusion Vulnerability

Path Traversal vulnerability in Frenify Arlo allows PHP Local File Inclusion. This issue affects Arlo: from n/a through 6.0.3...

CVE-2025-39476

CVE-2025-39476 corresponds to a Local File Inclusion in the Revo WordPress theme (magentech). The vulnerability is described as Improper Control of Filename for Include/Require Statement in PHP (PHP Remote File Inclusion) and affects Revo versions from n/a up to 4.0.26. The CVE entry is linked to...

CVE-2025-39476 WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magentech Revo revo allows PHP Local File Inclusion.This issue affects Revo: from n/a through = 4.0.26...

CVE-2025-39476 WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magentech Revo allows PHP Local File Inclusion. This issue affects Revo: from n/a through 4.0.26...

CVE-2025-48125

WP Event Manager plugin for WordPress (versions 3.1.49 and earlier) is affected by CVE-2025-48125 due to improper control of filename for include/require in a PHP program, enabling Local File Inclusion (LFI) / PHP Remote File Inclusion under a PHP context. Exploitation context indicates a remote ...

CVE-2025-48125 WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Event Manager WP Event Manager wp-event-manager allows PHP Local File Inclusion.This issue affects WP Event Manager: from n/a through = 3.1.51...

CVE-2025-48125 WordPress WP Event Manager <= 3.1.49 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Event Manager WP Event Manager allows PHP Local File Inclusion. This issue affects WP Event Manager: from n/a through 3.1.49...

CVE-2025-48126 WordPress Essential Real Estate <= 5.2.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in g5theme Essential Real Estate allows PHP Local File Inclusion. This issue affects Essential Real Estate: from n/a through 5.2.1...

CVE-2025-48126

The CVE-2025-48126 entry concerns WordPress plugin WordPress Essential Real Estate (versions through 5.2.1; Patch/PatchStack notes up to 5.2.6) with an Improper Control of Filename for Include/Require Statement vulnerability leading to PHP Local File Inclusion (LFI). Root cause: mismanagement of ...

CVE-2025-48126 WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in g5theme Essential Real Estate essential-real-estate allows PHP Local File Inclusion.This issue affects Essential Real Estate: from n/a through = 5.2.9...

CVE-2025-49275 WordPress Blogbyte theme <= 1.1.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Blogbyte blogbyte allows PHP Local File Inclusion.This issue affects Blogbyte: from n/a through = 1.1.1...

CVE-2025-49275

Summary: CVE-2025-49275 affects the Blogbyte WordPress theme (versions &lt;= 1.1.1). The root cause is improper filename control in PHP, enabling Local File Inclusion (LFI) via an include/require statement. The vulnerability is unauthenticated and can be triggered by an attacker to read or includ...

CVE-2025-49275 WordPress Blogbyte <= 1.1.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Blogbyte allows PHP Local File Inclusion. This issue affects Blogbyte: from n/a through 1.1.1...

CVE-2025-49276

CVE-2025-49276 corresponds to a Local File Inclusion (LFI) in the WordPress Blogmine plugin/theme (versions up to 1.1.7) caused by improper filename control in include/require statements. Exploitation details are not provided in the documents, but multiple sources confirm unauthenticated access a...