EUVD-2025-38113

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through = 2.3.6...

PT-2025-45275

Name of the Vulnerable Software and Affected Versions Favorites versions prior to 2.3.7 Description An improper control of filename for include/require statements in the Favorites plugin for WordPress allows for Local File Inclusion. This issue enables unauthenticated attackers to include and...