CVE-2025-30635 WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeAtelier IDonatePro idonate-pro allows PHP Local File Inclusion.This issue affects IDonatePro: from n/a through = 2.1.9...

CVE-2025-30635 WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeAtelier IDonatePro idonate-pro allows PHP Local File Inclusion.This issue affects IDonatePro: from n/a through = 2.1.9...

CVE-2025-30635

CVE-2025-30635 affects IDonatePro (WordPress plugin) &lt;= 2.1.9 and is described as an improper control of the filename for include/require statements, enabling PHP Local File Inclusion. Public sources in the connected documents corroborate the vulnerability as a Local File Inclusion issue and n...

CVE-2025-32288

CVE-2025-32288 – RT-Theme 18 Extensions (WordPress) Affects WordPress plugin: RT-Theme 18 Extensions, versions through 2.4. Description: Improper control of filenames for Include/Require statements in PHP (PHP Remote File Inclusion) leading to Local File Inclusion (LFI). The root cause is imprope...

CVE-2025-48332

CVE-2025-48332 denotes an unauthenticated Local File Inclusion in WordPress Gutenberg Blocks (PublishPress Blocks) affecting versions up to 3.3.1. The issue arises from improper control of filenames used in include/require statements (PHP Remote File Inclusion). CVSS v3.1 base score 7.5 (HIGH) wi...

CVE-2025-48293 WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dylan Kuhn Geo Mashup allows PHP Local File Inclusion. This issue affects Geo Mashup: from n/a through 1.13.16...

CVE-2025-52716

CVE-2025-52716 concerns the WordPress plugin WP REST Cache prior to or up to version 2025.1.0. The vulnerability is an improper control of filenames for include/require statements, enabling local file inclusion (LFI) via the PHP runtime. Affected products are WP REST Cache (WordPress plugin); no ...

CVE-2025-52732 WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RealMag777 Google Map Targeting allows PHP Local File Inclusion. This issue affects Google Map Targeting: from n/a through 1.1.6...

CVE-2025-52732

The CVE-2025-52732 entry concerns the WordPress Google Map Targeting plugin (versions up to 1.1.6) with an authenticated Local File Inclusion (LFI) vulnerability via improper control of include/require filenames. Public references corroborate LFI risk in Google Map Targeting 1.1.6. Monitor for f...

CVE-2025-52806

CVE-2025-52806 affects the WordPress plugin “JobSearch” (WP Job Board) up to version 2.9.0. It is a Local File Inclusion due to improper filename handling in PHP, enabling inclusion of local files. Public sources indicate the vulnerability is currently unpatched for affected releases and patches ...

PT-2025-33166 · Stmcan · Rt-Theme 18 | Extensions

Name of the Vulnerable Software and Affected Versions: stmcan RT-Theme 18 | Extensions versions through 2.4 Description: An Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' issue exists in stmcan RT-Theme 18 | Extensions, allowing PHP Local File Inclusion...

PT-2025-33241 · Thembay · Urna

Name of the Vulnerable Software and Affected Versions: thembay Urna versions through 2.5.7 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion. Recommendations:...

PT-2025-33242 · Themestek · Xinterio

Name of the Vulnerable Software and Affected Versions: Xinterio versions through 4.2 Description: An Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability exists in themeStek Xinterio, allowing PHP Local File Inclusion. Recommendations...

PT-2025-33167 · Unknown · Css & Javascript Toolbox

Name of the Vulnerable Software and Affected Versions: CSS & JavaScript Toolbox affected versions not specified Description: The vulnerability involves improper control of filename handling for include/require statements in a PHP program, specifically a PHP remote file inclusion issue. This allow...

PT-2025-33195 · Unknown · Cloud Saml Sso - Single Sign On Login

Name of the Vulnerable Software and Affected Versions: Cloud SAML SSO - Single Sign On Login versions through 1.0.18 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File...

VulnCheck KEV: CVE-2025-54701

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Unicamp unicamp allows PHP Local File Inclusion.This issue affects Unicamp: from n/a through = 2.6.3...

PT-2025-33252

Name of the Vulnerable Software and Affected Versions: ThemeMove Makeaholic versions through 1.8.4 Description: The software contains an Improper Control of Filename for Include/Require Statement, also known as a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion...

PT-2025-33218 · Unknown · Eyecix Jobsearch

Name of the Vulnerable Software and Affected Versions: eyecix JobSearch versions through 2.9.0 Description: An Improper Control of Filename for Include/Require Statement 'PHP Remote File Inclusion' issue exists in eyecix JobSearch, allowing PHP Local File Inclusion. Recommendations: Update eyecix...

PT-2025-32472 · Unknown · Oitcode Samarium

Name of the Vulnerable Software and Affected Versions: oitcode samarium versions up to 0.9.6 Description: A critical vulnerability exists in oitcode samarium, allowing for unrestricted file uploads. The issue affects an unknown function within the /dashboard/product file of the Create Product Pag...

CVE-2025-8764

A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0. Affected is the function Upload of the file /wx/storage/upload. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclose...