Lucene search
K

8828 matches found

CVE
CVE
added 2025/04/03 1:27 p.m.38 views

CVE-2025-30596

CVE-2025-30596 concerns an authenticated path traversal vulnerability in the WordPress plugin 'include-file' (

6.5CVSS7.2AI score0.00434EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/03 1:27 p.m.2 views

CVE-2025-30596 WordPress include-file plugin <= 1 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in tstafford include-file include-file allows Path Traversal.This issue affects include-file: from n/a through = 1...

6.5CVSS7.2AI score0.00434EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/03 1:27 p.m.13 views

CVE-2025-30596 WordPress include-file plugin <= 1 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in tstafford include-file include-file allows Path Traversal.This issue affects include-file: from n/a through = 1...

6.5CVSS0.00434EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/03 10:13 a.m.5 views

CVE-2025-30594

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in samsk Include URL include-url allows Path Traversal.This issue affects Include URL: from n/a through = 0.3.5...

6.5CVSS7.2AI score0.00434EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/03 12:0 a.m.2 views

PT-2025-14712 · Unknown · Debounce Email Validator

Name of the Vulnerable Software and Affected Versions: DeBounce Email Validator versions n/a through 5.7 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File...

7.5CVSS9.5AI score0.02322EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/04/03 12:0 a.m.3 views

PT-2025-14703 · Unknown · Notfound Include-File

Name of the Vulnerable Software and Affected Versions: NotFound include-file versions n/a through 1 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, in the NotFound include-file. This vulnerability...

6.5CVSS6.8AI score0.00434EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.2 views

WordPress plugin include-file 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

6.5CVSS7.1AI score0.00434EPSS
Exploits0References1
OSV
OSV
added 2025/04/01 6:15 a.m.1 views

CVE-2025-30849

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in g5theme Essential Real Estate allows PHP Local File Inclusion. This issue affects Essential Real Estate: from n/a through 5.2.0...

9.8CVSS7.3AI score
Exploits0References1
OSV
OSV
added 2025/04/01 6:15 a.m.1 views

CVE-2025-30870

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine allows PHP Local File Inclusion. This issue affects WP Travel Engine: from n/a through 6.3.5...

9.8CVSS5.8AI score0.00785EPSS
Exploits0References1
NVD
NVD
added 2025/04/01 6:15 a.m.7 views

CVE-2025-30594

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in samsk Include URL include-url allows Path Traversal.This issue affects Include URL: from n/a through = 0.3.5...

6.5CVSS0.00434EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 5:31 a.m.5 views

CVE-2025-30594 WordPress Include URL plugin <= 0.3.5 Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in samsk Include URL include-url allows Path Traversal.This issue affects Include URL: from n/a through = 0.3.5...

6.5CVSS7.3AI score0.00434EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/01 5:31 a.m.14 views

CVE-2025-30594 WordPress Include URL plugin <= 0.3.5 Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in samsk Include URL include-url allows Path Traversal.This issue affects Include URL: from n/a through = 0.3.5...

6.5CVSS0.00434EPSS
Exploits0References1
CVE
CVE
added 2025/04/01 5:31 a.m.47 views

CVE-2025-30594

CVE-2025-30594 affects the WordPress Include URL plugin. The issue is a path traversal vulnerability (arbitrary file download) in Include URL, exploitable from n/a to version 0.3.5. Connected sources list this CVE under Include URL with Arbitrary File Download; patch status in provided docs is Un...

6.5CVSS7.2AI score0.00434EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.2 views

WordPress plugin Include URL 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

6.5CVSS8.5AI score0.00434EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.2 views

Mite 代码问题漏洞

Mite is a Perl 5 distribution of Mite by Toby Inkster Individual Developer. A code issue vulnerability exists in versions prior to Mite 0.013000 that stems from adding the current working directory to the INC path, which could lead to the execution of arbitrary code...

6.5CVSS6.9AI score0.00441EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.1 views

PT-2025-14038 · Unknown · Include Url

Name of the Vulnerable Software and Affected Versions: NotFound Include URL versions 0.3.5 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability affects the Include URL...

6.5CVSS9.1AI score0.00434EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.1 views

PT-2025-14408 · Unknown · Material Dashboard

Name of the Vulnerable Software and Affected Versions: Material Dashboard versions n/a through 1.4.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion...

8.1CVSS9.4AI score0.01942EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/03/31 6:7 a.m.15 views

CVE-2025-31016 WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetWooBuilder jet-woo-builder allows PHP Local File Inclusion.This issue affects JetWooBuilder: from n/a through = 2.1.18...

7.5CVSS0.01091EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/30 10:23 a.m.11 views

CVE-2025-31093

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in redpixelstudios RPS Include Content rps-include-content allows DOM-Based XSS.This issue affects RPS Include Content: from n/a through = 1.2.1...

6.5CVSS7.2AI score0.00277EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/03/29 11:19 p.m.4 views

WordPress Include URL plugin <= 0.3.5 Arbitrary File Download Vulnerability

WordPress Include URL plugin = 0.3.5 Arbitrary File Download Vulnerability discovered by timomangcut in WordPress Plugin Include URL versions = 0.3.5...

6.5CVSS6.9AI score0.00434EPSS
Exploits0Affected Software1
Rows per page
Query Builder