23967 matches found
CVE-2025-58637
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart immonex-kickstart allows PHP Local File Inclusion.This issue affects immonex Kickstart: from n/a through = 1.11.6...
CVE-2025-58608
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BuddyDev MediaPress mediapress allows PHP Local File Inclusion.This issue affects MediaPress: from n/a through = 1.5.9.1...
WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by zaim in WordPress Plugin MediaPress versions = 1.5.9.1...
CVE-2025-58637 WordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart immonex-kickstart allows PHP Local File Inclusion.This issue affects immonex Kickstart: from n/a through = 1.11.6...
CVE-2025-58637
CVE-2025-58637 affects the WordPress plugin immonex Kickstart (
CVE-2025-58637 WordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart immonex-kickstart allows PHP Local File Inclusion.This issue affects immonex Kickstart: from n/a through = 1.11.6...
CVE-2025-58608
CVE-2025-58608 : MediaPress (BuddyDev MediaPress plugin) contains a PHP Local File Inclusion due to improper control of filenames in include/require. Affected: MediaPress versions up to 1.5.9.1. Impact is high per CVSS metrics (network attack, no user interaction, total impact). Remediation: upgr...
CVE-2025-58608 WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BuddyDev MediaPress mediapress allows PHP Local File Inclusion.This issue affects MediaPress: from n/a through = 1.5.9.1...
CVE-2025-58608 WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BuddyDev MediaPress mediapress allows PHP Local File Inclusion.This issue affects MediaPress: from n/a through = 1.5.9.1...
WordPress Myour Theme <= 1.5.6 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Theme Myour versions = 1.5.6...
WordPress WP Abstracts plugin <= 2.7.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by timomangcut Patchstack Alliance in WordPress Plugin WP Abstracts versions = 2.7.4...
WordPress Oblo theme <= 2.2.4 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Oblo versions = 2.2.4...
WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin InPost Gallery versions = 2.1.4.5...
WordPress Spirit Framework plugin <= 1.2.13 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Bonds in WordPress Plugin Spirit Framework versions = 1.2.13...
PT-2025-35766
Name of the Vulnerable Software and Affected Versions immonex Kickstart versions through 1.11.6 Description The software contains an Improper Control of Filename for Include/Require Statement vulnerability, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion...
PT-2025-35742
Name of the Vulnerable Software and Affected Versions: BuddyDev MediaPress versions through 1.5.9.1 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion...
CVE-2025-58608: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BuddyDev MediaPress mediapress allows PHP Local File Inclusion.This issue affects MediaPress: from n/a through = 1.5.9.1...
WordPress Oblo Theme <= 2.2.4 is vulnerable to Local File Inclusion
Software Oblo Type Theme Vulnerable versions = 2.2.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-48290 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 513d4a3a8bf3 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Requir...
CVE-2025-58637: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in immonex immonex Kickstart immonex-kickstart allows PHP Local File Inclusion.This issue affects immonex Kickstart: from n/a through = 1.11.6...