CVE-2025-32921 WordPress Arrival theme <= 1.4.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WPoperation Arrival allows PHP Local File Inclusion. This issue affects Arrival: from n/a through 1.4.5...

CVE-2025-39378

CVE-2025-39378 is a Local File Inclusion vulnerability in the WordPress plugin Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light (versions through 2.4.37). The issue arises from improper control of filenames used in PHP Include/Require statements, enabling PHP Local File Inclusi...

CVE-2025-39384

CVE-2025-39384 affects WordPress plugin Product Lister for eBay (

CVE-2025-39387

CVE-2025-39387 covers a Local File Inclusion in the WordPress theme Opstore (Opstore theme). Affected product: Opstore theme, versions n/a through 1.4.5. Root cause: improper control of filename for include/require in PHP, enabling local file inclusion. Public details from CVE descriptions and Pa...

PT-2025-17748 · Xews Lite · Xews Lite

Name of the Vulnerable Software and Affected Versions: Xews Lite versions 1.0.9 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-17740 · Unknown · Wpoperation Arrival

Name of the Vulnerable Software and Affected Versions: WPoperation Arrival versions 1.4.5 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local...

PT-2025-17744 · Woocommerce · Holest Engineering Spreadsheet Price Changer

Name of the Vulnerable Software and Affected Versions: Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light versions through 2.4.37 Description: The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP...

PT-2025-17755 · Unknown · License For Envato

Name of the Vulnerable Software and Affected Versions: License For Envato versions 1.0.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or 'PHP Local File Inclusion'. This...

PT-2025-17749 · Cedcommerce · Cedcommerce Product Lister For Ebay

Name of the Vulnerable Software and Affected Versions: cedcommerce Product Lister for eBay versions n/a through 2.0.9 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Loca...

CVE-2025-1021

Missing authorization vulnerability in synocopy in Synology DiskStation Manager DSM before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2025-1021

CVE-2025-1021 affects Synology DiskStation Manager (DSM) via the synocopy component. The issue is a missing authorization vulnerability that allows remote attackers to read arbitrary files through unspecified vectors. Affected DSM versions are prior to 7.1.1-42962-8, 7.2.1-69057-7, and 7.2.2-7280...

Synology DiskStation Manager 安全漏洞

Synology DiskStation Manager DSM is an operating system for use on networked storage servers NAS from Synology, a Chinese company. This operating system manages information such as data, files, photos, music, and other information. A security vulnerability exists in Synology DiskStation Manager,...

CVE-2025-39526

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in nicdark Hotel Booking nd-booking allows PHP Local File Inclusion.This issue affects Hotel Booking: from n/a through = 3.6...

CVE-2025-39452

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Arraytics WPCafe wp-cafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through = 2.2.32...

CVE-2025-39462

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in teamzt Smart Agreements smart-agreements allows PHP Local File Inclusion.This issue affects Smart Agreements: from n/a through = 1.0.3...

CVE-2025-39461

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Nawawi Jamili Docket Cache docket-cache allows PHP Local File Inclusion.This issue affects Docket Cache: from n/a through = 24.07.02...

WordPress plugin Ray Enterprise Translation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2025-17082 · Unknown · Jbhovik Ray Enterprise Translation

Name of the Vulnerable Software and Affected Versions: jbhovik Ray Enterprise Translation versions 1.7.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This...

PT-2025-17018 · Teamzt · Teamzt Smart Agreements

Name of the Vulnerable Software and Affected Versions: teamzt Smart Agreements versions 1.0.3 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP...

PT-2025-17017

Name of the Vulnerable Software and Affected Versions Docket Cache versions through 24.07.02 Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This vulnerability allows PHP Loc...