21896 matches found
CVE-2025-53244
CVE-2025-53244: Local File Inclusion in WordPress Magazine Elite Theme (Unfoldwp) up to version 1.2.4. The issue arises from Improper Control of Filename for Include/Require Statements, enabling PHP Local File Inclusion. Affected software: Magazine Elite (Theme)
CVE-2025-53227
CVE-2025-53227 : WordPress Magazine Saga Theme
CVE-2025-49405 WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...
CVE-2025-49405
The Favethemes Houzez WordPress theme is vulnerable to a PHP Local File Inclusion (LFI) vulnerability due to improper control of filenames in include/require statements. This flaw affects versions prior to 4.1.4 (specifically identified in some sources as versions
CVE-2025-49383
CVE-2025-49383 affects the WordPress theme Neresa (Neresа) up to version 1.3. The vulnerability is an improper filename control in Include/Require statements, enabling Local File Inclusion in PHP. Public references indicate CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high complexi...
PT-2025-35034
Name of the Vulnerable Software and Affected Versions: CocoBasic Neresa versions through 1.3 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion. Recommendation...
CVE-2025-49405: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...
PT-2025-35062
Name of the Vulnerable Software and Affected Versions: gavias Kipso versions through 1.3.4 Description: The software contains an Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' vulnerability, which allows for PHP Local File Inclusion. Recommendations: Update...
PT-2025-35039
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...
PT-2025-35070
Name of the Vulnerable Software and Affected Versions: ovatheme Ireca versions through 1.8.5 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion. Recommendations...
PT-2025-35056
Name of the Vulnerable Software and Affected Versions: CodeYatri Gutenify versions through 1.5.6 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion...
PT-2025-35051
Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Elite versions through 1.2.4 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion...
CVE-2025-53244: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magazine Elite magazine-elite allows PHP Local File Inclusion.This issue affects Magazine Elite: from n/a through = 1.2.4...
CVE-2025-53247: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpinterface BlogMarks blogmarks allows PHP Local File Inclusion.This issue affects BlogMarks: from n/a through = 1.0.8...
CVE-2025-53328: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows PHP Local File Inclusion.This issue affects Poll, Survey & Quiz Maker Plugin b...
CVE-2025-53326: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CodeYatri Gutenify gutenify allows PHP Local File Inclusion.This issue affects Gutenify: from n/a through = 1.5.4...
PT-2025-35048
Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Saga versions through 1.2.7 Description: The software contains an Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' issue, allowing PHP Local File Inclusion. Recommendations: Update...
CVE-2025-9529
A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to t...
CVE-2025-9529
A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to t...
CVE-2025-9529
CVE-2025-9529 affects Campcodes Payroll Management System 1.0. The vulnerability is a remote file inclusion caused by manipulating the page argument in the /index.php include function. Multiple sources confirm this weakness and remote exploitation is possible, with public exploits available. No s...