PT-2025-24470 · Unknown · Valen - Sport

Name of the Vulnerable Software and Affected Versions: Valen - Sport, Fashion WooCommerce WordPress Theme versions n/a through 2.4 Description: The issue affects the Valen - Sport, Fashion WooCommerce WordPress Theme, allowing for PHP Local File Inclusion due to improper control of filename for...

PT-2025-24497 · Frenify · Frenify Arlo

Name of the Vulnerable Software and Affected Versions: Frenify Arlo versions n/a through 6.0.3 Description: The issue is a Path Traversal vulnerability that allows PHP Local File Inclusion in Frenify Arlo. Recommendations: For versions n/a through 6.0.3, update to a version that fixes this issue,...

CVE-2025-49308

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.5.1...

CVE-2025-49308

CVE-2025-49308 affects WP Travel Engine (WordPress plugin) up to version 6.5.1. It is a PHP include/require filename control issue that enables Local File Inclusion (LFI) via a PHP Remote File Inclusion pattern. The entry notes the vulnerability as authenticated LFI and is marked as patched in la...

PT-2025-24086 · Stylemixthemes · Motors - Events

Name of the Vulnerable Software and Affected Versions: StylemixThemes Motors - Events versions 1.4.7 and earlier Description: The issue affects the Motors - Events plugin, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also know...

CVE-2025-32286

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ApusTheme Butcher butcher allows PHP Local File Inclusion.This issue affects Butcher: from n/a through = 2.40...

CVE-2025-48292

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File Inclusion.This issue affects Tourmaster: from n/a through = 5.3.8...

CVE-2025-32286

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ApusTheme Butcher butcher allows PHP Local File Inclusion.This issue affects Butcher: from n/a through = 2.40...

CVE-2025-47453

CVE-2025-47453 affects the WordPress plugin WP Smart Import (Xylus Themes) up to version 1.1.3, with a local file inclusion (LFI) vulnerability caused by improper control of Include/Require filename handling. Evidence in the CVE record and multiple connected sources confirms the vulnerability is ...

CVE-2024-43996

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ElementsKit ElementsKit Pro allows PHP Local File Inclusion.This issue affects ElementsKit Pro: from n/a through 3.6.0...

CVE-2024-52386

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme Classified Listing classified-listing allows PHP Local File Inclusion.This issue affects Classified Listing: from n/a through = 3.1.16...

CVE-2024-38768

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Webangon The Pack Elementor addons allows PHP Local File Inclusion, Path Traversal.This issue affects The Pack Elementor addons: from n/a through 2.0.8.6...

CVE-2024-38709

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Milan Petrovic GD Rating System allows PHP Local File Inclusion.This issue affects GD Rating System: from n/a through 3.6...

CVE-2024-38772

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetWidgets for Elementor and WooCommerce allows PHP Local File Inclusion.This issue affects JetWidgets for Elementor and WooCommerce: from n/a through 1.1.7...

CVE-2024-33541

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in BetterAddons Better Elementor Addons allows PHP Local File Inclusion.This issue affects Better Elementor Addons: from n/a through 1.4.1...

CVE-2024-44048

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wpWax Product Carousel Slider & Grid Ultimate for WooCommerce woo-product-carousel-slider-and-grid-ultimate.This issue affects Product Carousel Slider & Grid Ultimate for...

CVE-2024-43129

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPDeveloper BetterDocs allows PHP Local File Inclusion.This issue affects BetterDocs: from n/a through 3.5.8...

CVE-2024-43165

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rashid87 WPSection allows PHP Local File Inclusion.This issue affects WPSection: from n/a through 1.3.8...

CVE-2024-43281

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in VOID CODERS Void Elementor Post Grid Addon for Elementor Page builder allows PHP Local File Inclusion.This issue affects Void Elementor Post Grid Addon for Elementor Page builder: from n/a through 2.3...

CVE-2023-39163

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Averta Phlox Shop allows PHP Local File Inclusion.This issue affects Phlox Shop: from n/a through 2.0.0...