WordPress ProDent Theme <= 1.5.9 is vulnerable to Local File Inclusion

Software ProDent Type Theme Vulnerable versions = 1.5.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 720bb591f012 Credits Bonds Required privilege Unauthenticated Published ...

WordPress ProRange Theme <= 2.3 is vulnerable to Local File Inclusion

Software ProRange Type Theme Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 5a4cba513a6c Credits Bonds Required privilege Unauthenticated Published 8...

WordPress Corredo Theme <= 1.1.14 is vulnerable to Local File Inclusion

Software Corredo Type Theme Vulnerable versions = 1.1.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 2e44a0ca0439 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Accalia Theme <= 1.5.3 is vulnerable to Local File Inclusion

Software Accalia Type Theme Vulnerable versions = 1.5.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID c9c28aa34cba Credits Bonds Required privilege Unauthenticated Published ...

WordPress Chakra Theme <= 1.13.0 is vulnerable to Local File Inclusion

Software Chakra Type Theme Vulnerable versions = 1.13.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 45c32e9a60a9 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Carlax Theme <= 1.1.1 is vulnerable to Local File Inclusion

Software Carlax Type Theme Vulnerable versions = 1.1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1b71a4a47a1d Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Juno Theme <= 2.19 is vulnerable to Local File Inclusion

Software Juno Type Theme Vulnerable versions = 2.19 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 1d4e77af675c Credits Bonds Required privilege Unauthenticated Published 8...

WordPress Heaven11 Theme <= 1.0.9 is vulnerable to Local File Inclusion

Software Heaven11 Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 942d82445c78 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Agora Theme <= 1.4.0 is vulnerable to Local File Inclusion

Software Agora Type Theme Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 95d0e3653e12 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Lab Theme <= 1.0.0 is vulnerable to Local File Inclusion

Software Lab Type Theme Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a830ef2cbee5 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Require...

WordPress HotLock Theme <= 1.3.9 is vulnerable to Local File Inclusion

Software HotLock Type Theme Vulnerable versions = 1.3.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 457feca0b67b Credits Bonds Required privilege Unauthenticated Published ...

WordPress ChainPress Theme <= 1.0.14 is vulnerable to Local File Inclusion

Software ChainPress Type Theme Vulnerable versions = 1.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID dfe4094bf26b Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Good Wine Theme <= 1.1.10 is vulnerable to Local File Inclusion

Software Good Wine Type Theme Vulnerable versions = 1.1.10 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 29a7a88e3b43 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Podium Theme <= 1.1.13 is vulnerable to Local File Inclusion

Software Podium Type Theme Vulnerable versions = 1.1.13 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 8c07bac37dd1 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Translang Theme <= 1.1.16 is vulnerable to Local File Inclusion

Software Translang Type Theme Vulnerable versions = 1.1.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID f5cee4143f4e Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress Hampton Theme <= 1.3.3 is vulnerable to Local File Inclusion

Software Hampton Type Theme Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 504b1fdc817d Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...

WordPress 69 Clothing Theme <= 1.2.11 is vulnerable to Local File Inclusion

Software 69 Clothing Type Theme Vulnerable versions = 1.2.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID d2c943f4cc66 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunit...

CVE-2025-58206

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through = 3.2.5...

CVE-2025-9990

The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portaltype parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

Awesome-Bugbounty-Writeups

This is a curated list of bug bounty writeups, specifically focusing on various types of web application vulnerabilities. The repository is organized by vulnerability type, with sections for Cross-Site Scripting XSS, Cross-Site Request Forgery CSRF, Clickjacking, Local File Inclusion LFI, Subdoma...