CVE-2025-31632

CVE-2025-31632 affects WordPress plugin/theme La Boom

CVE-2025-31912

CVE-2025-31912 affects Enzio - Responsive Business WordPress Theme (≤1.1.8). It is described as an Improper Control of Filename for Include/Require Statement (PHP Local/File Inclusion). Reported as Unpatched by Wordfence; CVSS v3.1 base score 8.1 (Network, High, Privileges none, User interaction ...

CVE-2025-31913 WordPress Ogami <= 1.53 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ApusTheme Ogami allows PHP Local File Inclusion. This issue affects Ogami: from n/a through 1.53...

CVE-2025-32286

CVE-2025-32286 refers to an Unauthenticated Local File Inclusion in the WordPress Butcher theme (

CVE-2025-32289

CVE-2025-32289 is a Local File Inclusion vulnerability in the WordPress theme Yozi (ApusTheme Yozi) affecting versions through 2.0.52. The root cause is improper control of filenames in include/require statements, enabling PHP Local File Inclusion. Public sources corroborate the issue and tie it ...

CVE-2025-32309

CVE-2025-32309 affects ThemeMove Healsoul WordPress theme, specifically versions n/a through 2.0.2. The issue is an improper control of filename for include/require in PHP, enabling Local File Inclusion (LFI) and, per sources, unauthenticated access. The CVSS base metrics indicate a high-severity...

CVE-2025-39494

CVE-2025-39494 refers to a Local File Inclusion vulnerability in the WordPress theme Wilmër by Mikado-Themes. The issue arises from improper control of the filename used in PHP include/require, enabling LFI via PHP Remote File Inclusion mechanics. Affected: Wilmër versions prior to 3.4.2. Evidenc...

CVE-2025-39506

CVE-2025-39506 : WordPress Nasa Core Plugin

CVE-2025-46454

CVE-2025-46454 concerns the WordPress plugin "Meta Keywords & Description" (versions

CVE-2025-46474 WordPress SEUR Oficial <= 2.2.23 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in SEUR OFICIAL SEUR Oficial allows PHP Local File Inclusion. This issue affects SEUR Oficial: from n/a through 2.2.23...

CVE-2025-47670

CVE-2025-47670 is an LFI (Local File Inclusion) vulnerability in miniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon, affecting versions up to 7.6.10. Root cause: improper filename control in PHP include/require leading to RFI/LFI. CVSSv3.1 base score 8.1...

CVE-2024-52385

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpmart Team Member team-showcase-supreme.This issue affects Team Member: from n/a through = 7.4...

CVE-2024-7496

A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiated remotely. The exploit has been...

CVE-2024-2917

A vulnerability was found in Campcodes House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument page leads to file inclusion. The attack can be launched remotely. The...

CVE-2024-2150

A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2024-0728

A vulnerability classified as problematic was found in ForU CMS up to 2020-06-23. Affected by this vulnerability is an unknown functionality of the file channel.php. The manipulation of the argument ccmodel leads to file inclusion. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-20405

A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a stored XSS attack by exploiting an RFI vulnerability. This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are...

CVE-2024-4818

A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

CVE-2024-35650

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Melapress MelaPress Login Security melapress-login-security.This issue affects MelaPress Login Security: from n/a through = 1.3.0...

CVE-2024-6937

A vulnerability, which was classified as problematic, was found in formtools.org Form Tools 3.1.1. Affected is the function curlexec of the file /admin/forms/optionlists/edit.php of the component Import Option List. The manipulation of the argument url leads to file inclusion. It is possible to...