CVE-2025-53247

CVE-2025-53247 : WordPress BlogMarks Theme

CVE-2025-53248

CVE-2025-53248 affects the WordPress theme Eximious Magazine (Magazine: versions up to 1.2.2). The issue is an improper control of filename for Include/Require statements in PHP, enabling Local File Inclusion (LFI). Public sources consistently identify Eximious Magazine <= 1.2.2 as vulnerable ...

CVE-2025-53244 WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magazine Elite magazine-elite allows PHP Local File Inclusion.This issue affects Magazine Elite: from n/a through = 1.2.4...

CVE-2025-53244

CVE-2025-53244: Local File Inclusion in WordPress Magazine Elite Theme (Unfoldwp) up to version 1.2.4. The issue arises from Improper Control of Filename for Include/Require Statements, enabling PHP Local File Inclusion. Affected software: Magazine Elite (Theme)

CVE-2025-53227

CVE-2025-53227 : WordPress Magazine Saga Theme

CVE-2025-49405

CVE-2025-49405 affects Houzez (WordPress theme). Root cause: Improper control of filename for include/require statements leading to Local File Inclusion (PHP LFI). Affected versions: Houzez up to 4.1.3 (before 4.1.4). Impact is described as high confidentiality, integrity, and availability risk. ...

CVE-2025-49405 WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...

CVE-2025-49383

CVE-2025-49383 affects the WordPress theme Neresa (Neresа) up to version 1.3. The vulnerability is an improper filename control in Include/Require statements, enabling Local File Inclusion in PHP. Public references indicate CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high complexi...

DOS & CO SS1 路径遍历漏洞

DOS & CO SS1 is an asset management tool from DOS & CO Japan. A path traversal vulnerability exists in DOS & CO SS1 16.0.0.10 and earlier versions, which stems from an improperly restricted pathname and could allow a remote unauthenticated attacker to view arbitrary files...

PT-2025-35062

Name of the Vulnerable Software and Affected Versions: gavias Kipso versions through 1.3.4 Description: The software contains an Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' vulnerability, which allows for PHP Local File Inclusion. Recommendations: Update...

PT-2025-35039

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...

PT-2025-35056

Name of the Vulnerable Software and Affected Versions: CodeYatri Gutenify versions through 1.5.6 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion...

PT-2025-35048

Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Saga versions through 1.2.7 Description: The software contains an Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' issue, allowing PHP Local File Inclusion. Recommendations: Update...

PT-2025-35051

Name of the Vulnerable Software and Affected Versions: Unfoldwp Magazine Elite versions through 1.2.4 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion...

PT-2025-35034

Name of the Vulnerable Software and Affected Versions: CocoBasic Neresa versions through 1.3 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue, which allows for PHP Local File Inclusion. Recommendation...

PT-2025-35070

Name of the Vulnerable Software and Affected Versions: ovatheme Ireca versions through 1.8.5 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion. Recommendations...

CVE-2025-9529

A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2025-9529

A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to t...

CVE-2025-9529

CVE-2025-9529 affects Campcodes Payroll Management System 1.0. The vulnerability is a remote file inclusion caused by manipulating the page argument in the /index.php include function. Multiple sources confirm this weakness and remote exploitation is possible, with public exploits available. No s...

PT-2025-34865

Name of the Vulnerable Software and Affected Versions: Campcodes Payroll Management System version 1.0 Description: A weakness has been identified in Campcodes Payroll Management System 1.0. The manipulation of the page argument in the /index.php file’s include function causes a file inclusion...