CVE-2026-66670: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Måne = 1.7 versions...

CVE-2026-66450: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Geo Mashup = 1.13.18 versions...

CVE-2026-65477: Improper Control of Filename for Include/Require Statement in PHP Program

Contributor Local File Inclusion in Tonda Core = 2.1.2 versions...

CVE-2026-57805: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.This issue affects Tonda: from n/a through = 2.5...

CVE-2026-15540: Improper Control of Filename for Include/Require Statement in PHP Program

A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrative Interface. Performing a manipulation of the argument page results in improper control of filename for include/requi...

CVE-2025-68064: Improper Control of Filename for Include/Require Statement in PHP Program

Contributor Local File Inclusion in Goya Core 1.0.9.4 versions...

CVE-2026-39549: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Aperitif = 1.5 versions...

CVE-2026-39590: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Atomlab = 2.4.5 versions...

CVE-2025-69167: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Eros = 1.3 versions...

CVE-2025-69160: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Gita = 1.11 versions...

CVE-2026-34895: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Softlab Core 1.2.11 versions...

CVE-2026-40721: Improper Control of Filename for Include/Require Statement in PHP Program

Contributor Local File Inclusion in Element Pack Pro = 9.0.6 versions...

CVE-2025-69149: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Top Dog = 1.0.5 versions...

CVE-2025-69150: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Medeus = 1.14 versions...

CVE-2025-53440: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Confidant: from n/a through 1.4...

CVE-2026-37266: Improper Control of Filename for Include/Require Statement in PHP Program

An issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote attacker to execute arbitrary code via the forcedownload.php component...

CVE-2026-22498: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through = 3.1...

CVE-2026-22499: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Lella lella allows PHP Local File Inclusion.This issue affects Lella: from n/a through = 1.2...

CVE-2026-22403: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through = 1.9...

CVE-2026-22413: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Malgré malgre allows PHP Local File Inclusion.This issue affects Malgré: from n/a through = 1.0.3...