CVE-2025-28992

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in snstheme SNS Anton snsanton allows PHP Local File Inclusion.This issue affects SNS Anton: from n/a through = 4.1...

CVE-2025-27362

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BZOTheme Petito allows PHP Local File Inclusion.This issue affects Petito: from n/a before 1.6.6...

CVE-2025-28888

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BZOTheme GiftXtore bw-giftxtore allows PHP Local File Inclusion.This issue affects GiftXtore: from n/a through 1.7.7...

CVE-2023-25999

CVE-2023-25999 : Local File Inclusion in BodyCenter - Gym, Fitness WooCommerce WordPress Theme (

CVE-2025-24768

CVE-2025-24768 affects the WordPress theme “snstheme Nitan” (versions n/a through 2.9). The issue is described as an Improper Control of Filename for Include/Require Statement (PHP Remote File Inclusion) that enables PHP Local File Inclusion. Public sources consistently cite this as a local file ...

CVE-2025-28888 WordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BZOTheme GiftXtore bw-giftxtore allows PHP Local File Inclusion.This issue affects GiftXtore: from n/a through 1.7.7...

CVE-2025-28944

CVE-2025-28944 affects Avaz WordPress theme (versions n/a through 2.8). It is an Unauthenticated Local File Inclusion due to improper control of filenames for PHP Include/Require, enabling PHP LFI. CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high impact on confidentiality, integri...

CVE-2025-49282 WordPress Magze <= 1.0.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Unfoldwp Magze allows PHP Local File Inclusion. This issue affects Magze: from n/a through 1.0.9...

PT-2025-24534

Name of the Vulnerable Software and Affected Versions Unfoldwp Magways versions 1.2.1 and earlier Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. Thi...

PT-2025-24530

Name of the Vulnerable Software and Affected Versions Unfoldwp Blogprise versions 1.0.0 through 1.0.9 Description The issue is related to improper control of filename for include/require statement in PHP programs, also known as 'PHP Remote File Inclusion'. This allows PHP Local File Inclusion...

CVE-2025-48125: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Event Manager WP Event Manager wp-event-manager allows PHP Local File Inclusion.This issue affects WP Event Manager: from n/a through = 3.1.51...

CVE-2025-27362: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in BZOTheme Petito bw-petito allows PHP Local File Inclusion.This issue affects Petito: from n/a through 1.6.6...

CVE-2025-26592: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes Lab lab allows PHP Local File Inclusion.This issue affects Lab: from n/a through = 1.0.0...

PT-2025-24465 · Bzotheme · Bzotheme Craftxtore

Name of the Vulnerable Software and Affected Versions: BZOTheme CraftXtore versions n/a through 1.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24531

Name of the Vulnerable Software and Affected Versions Unfoldwp Blogty versions 1.0.0 through 1.0.11 Description The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

PT-2025-24533

Name of the Vulnerable Software and Affected Versions Unfoldwp Magty versions 1.0.0 through 1.0.6 Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-24535

Name of the Vulnerable Software and Affected Versions Unfoldwp Magze versions 1.0.9 and earlier Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local File...

PT-2025-24464 · Unknown · Snstheme Nitan

Name of the Vulnerable Software and Affected Versions: snstheme Nitan versions n/a through 2.9 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion. This...

PT-2025-24466 · Ancorathemes · Ancorathemes Inset

Name of the Vulnerable Software and Affected Versions: AncoraThemes Inset versions 1.18.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local...

PT-2025-24467 · Unknown · Bzotheme Petito

Name of the Vulnerable Software and Affected Versions: BZOTheme Petito versions 1.6.2 and earlier Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...