CVE-2025-49383

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CocoBasic Neresa neresa-wp allows PHP Local File Inclusion.This issue affects Neresa: from n/a through = 1.3...

CVE-2025-53326

CVE-2025-53326 describes an Unauthenticated Local File Inclusion in the WordPress Gutenify plugin (CodeYatri Gutenify) due to Improper Control of Filename for Include/Require Statements. Affected versions are Gutenify up to 1.5.6 (and earlier references show up to 1.5.4 in some advisories). The C...

CVE-2025-53248

CVE-2025-53248 affects the WordPress theme Eximious Magazine (Magazine: versions up to 1.2.2). The issue is an improper control of filename for Include/Require statements in PHP, enabling Local File Inclusion (LFI). Public sources consistently identify Eximious Magazine <= 1.2.2 as vulnerable ...

CVE-2025-53247

CVE-2025-53247 : WordPress BlogMarks Theme

CVE-2025-53244

CVE-2025-53244: Local File Inclusion in WordPress Magazine Elite Theme (Unfoldwp) up to version 1.2.4. The issue arises from Improper Control of Filename for Include/Require Statements, enabling PHP Local File Inclusion. Affected software: Magazine Elite (Theme)

CVE-2025-53244 WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magazine Elite magazine-elite allows PHP Local File Inclusion.This issue affects Magazine Elite: from n/a through = 1.2.4...

CVE-2025-53227

CVE-2025-53227 : WordPress Magazine Saga Theme

CVE-2025-49405

The Favethemes Houzez WordPress theme is vulnerable to a PHP Local File Inclusion (LFI) vulnerability due to improper control of filenames in include/require statements. This flaw affects versions prior to 4.1.4 (specifically identified in some sources as versions

CVE-2025-49405 WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...

CVE-2025-49383

CVE-2025-49383 affects the WordPress theme Neresa (Neresа) up to version 1.3. The vulnerability is an improper filename control in Include/Require statements, enabling Local File Inclusion in PHP. Public references indicate CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high complexi...

CVE-2025-53328: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows PHP Local File Inclusion.This issue affects Poll, Survey & Quiz Maker Plugin b...

CVE-2025-53326: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in CodeYatri Gutenify gutenify allows PHP Local File Inclusion.This issue affects Gutenify: from n/a through = 1.5.4...

CVE-2025-53247: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpinterface BlogMarks blogmarks allows PHP Local File Inclusion.This issue affects BlogMarks: from n/a through = 1.0.8...

CVE-2025-49405: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...

CVE-2025-53244: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magazine Elite magazine-elite allows PHP Local File Inclusion.This issue affects Magazine Elite: from n/a through = 1.2.4...

PT-2025-35062

Name of the Vulnerable Software and Affected Versions: gavias Kipso versions through 1.3.4 Description: The software contains an Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' vulnerability, which allows for PHP Local File Inclusion. Recommendations: Update...

PT-2025-35034

Name of the Vulnerable Software and Affected Versions: CocoBasic Neresa versions through 1.3 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion. Recommendation...

PT-2025-35051

Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Elite versions through 1.2.4 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion...

PT-2025-35048

Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Saga versions through 1.2.7 Description: The software contains an Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' issue, allowing PHP Local File Inclusion. Recommendations: Update...

PT-2025-35039

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...