CVE-2025-30999 WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fahad Mahmood External Store for Shopify wp-shopify allows PHP Local File Inclusion.This issue affects External Store for Shopify: from n/a through = 1.5.9...

CVE-2025-30999 WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fahad Mahmood External Store for Shopify wp-shopify allows PHP Local File Inclusion.This issue affects External Store for Shopify: from n/a through = 1.5.9...

CVE-2025-30999

CVE-2025-30999 impacts WP Shopify (WordPress) with an authenticated/local issue: an improper control of filenames for include/require can enable PHP Local File Inclusion. The vulnerability is described as WP Shopify

CVE-2025-49313 WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ovatheme BRW ova-brw allows PHP Local File Inclusion.This issue affects BRW: from n/a through = 1.8.6...

CVE-2025-49313 WordPress BRW <= 1.8.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ovatheme BRW allows PHP Local File Inclusion. This issue affects BRW: from n/a through 1.8.6...

CVE-2025-49307

WP Multilang (WordPress plugin) is affected by CVE-2025-49307, an authenticated Local File Inclusion via PHP Include/Require (PHP Remote File Inclusion) in versions up to 2.4.19. The CVE entry indicates an authenticated context (Contributor+), with exploitation potential linked to LFI, resulting ...

CVE-2025-49307 WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magazine3 WP Multilang wp-multilang allows PHP Local File Inclusion.This issue affects WP Multilang: from n/a through = 2.4.19...

CVE-2025-49308 WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.5.1...

CVE-2025-49307 WordPress WP Multilang <= 2.4.19 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Magazine3 WP Multilang allows PHP Local File Inclusion. This issue affects WP Multilang: from n/a through 2.4.19...

CVE-2025-49308

CVE-2025-49308 affects WP Travel Engine (WordPress plugin) up to version 6.5.1. It is a PHP include/require filename control issue that enables Local File Inclusion (LFI) via a PHP Remote File Inclusion pattern. The entry notes the vulnerability as authenticated LFI and is marked as patched in la...

CVE-2025-49308 WordPress WP Travel Engine <= 6.5.1 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine allows PHP Local File Inclusion. This issue affects WP Travel Engine: from n/a through 6.5.1...

CVE-2025-47586

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

CVE-2025-47586

CVE-2025-47586 is an unauthenticated Local File Inclusion in the WordPress plugin Motors - Events (versions up to and including 1.4.7). Exploitation arises from improper filename handling in PHP Include/Require, enabling an attacker to trick the application into including local files. Public sour...

CVE-2025-47586 WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

CVE-2025-47586 WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in StylemixThemes Motors - Events stm-motors-events allows PHP Local File Inclusion.This issue affects Motors - Events: from n/a through = 1.4.7...

PT-2025-24086 · Stylemixthemes · Motors - Events

Name of the Vulnerable Software and Affected Versions: StylemixThemes Motors - Events versions 1.4.7 and earlier Description: The issue affects the Motors - Events plugin, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also know...

PT-2025-24235 · WordPress · Magazine3 Wp Multilang

Name of the Vulnerable Software and Affected Versions: Magazine3 WP Multilang versions through 2.4.19 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

WordPress plugin Motors - Events 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress AI Mortgage Calculator plugin <= 1.0.1 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by 0x1ceKing in WordPress Plugin AI Mortgage Calculator versions = 1.0.1...

WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by timomangcut in WordPress Plugin External Store for Shopify versions = 1.5.9...