PT-2025-17742 · Everest Themes · Everestthemes Grace Mag

Name of the Vulnerable Software and Affected Versions: everestthemes Grace Mag versions 1.1.5 and earlier Description: The issue affects the everestthemes Grace Mag, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known ...

PT-2025-17753 · Woocommerce · Checkout Field Visibility For Woocommerce

Name of the Vulnerable Software and Affected Versions: Checkout Field Visibility for WooCommerce versions 1.2.3 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows for...

PT-2025-17758 · Unknown · Ghozylab Popup Builder

Name of the Vulnerable Software and Affected Versions: GhozyLab Popup Builder versions 1.1.35 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

PT-2025-17755 · Unknown · License For Envato

Name of the Vulnerable Software and Affected Versions: License For Envato versions 1.0.0 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' or 'PHP Local File Inclusion'. This...

PT-2025-17751 · Unknown · Wpoperation Opstore

Name of the Vulnerable Software and Affected Versions: WPoperation Opstore versions 1.4.5 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local...

PT-2025-17254 · Thimpress · Thimpress Ivy School

Name of the Vulnerable Software and Affected Versions: ThimPress Ivy School versions 1.6.0 and earlier Description: The issue is related to a Path Traversal vulnerability, specifically a '.../...//' vulnerability, which allows PHP Local File Inclusion in ThimPress Ivy School. Recommendations: For...

CVE-2025-26748

Cross-Site Request Forgery CSRF vulnerability in looswebstudio Arkhe arkhe allows PHP Local File Inclusion.This issue affects Arkhe: from n/a through = 3.12.0...

CVE-2025-26889

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in hockeydata hockeydata LOS hockeydata-los allows PHP Local File Inclusion.This issue affects hockeydata LOS: from n/a through = 1.2.4...

CVE-2025-39570

CVE-2025-39570 describes an LFI vulnerability in WordPress plugin WPCOM Member (versions up to and including 1.7.7). The issue arises from improper control of filenames in PHP include/require, enabling local file inclusion. Public records indicate a high-severity exposure (CVSS v3.1 base score 8....

CVE-2025-26748

CVE-2025-26748 is a CSRF to Local File Inclusion vulnerability affecting Arkhe theme (Arkhe) by LOOS,Inc. Details from Wordfence indicate Arkhe is affected up to version 3.11.0, with a CVSS v3.1 base score of 8.1 (HIGH) and attack vector NETWORK, requiring no privileges and no user interaction. T...

PT-2025-16512 · Loos · Arkhe

Name of the Vulnerable Software and Affected Versions: LOOS, Inc. Arkhe versions n/d through 3.11.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows PHP Local File Inclusion. This means an attacker could potentially force a user to perform unintende...

CVE-2025-32627

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclusion.This issue affects JS Job Manager: from n/a through = 2.0.2...

CVE-2025-32614

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File Inclusion.This issue affects EventON: from n/a through = 2.4...

CVE-2025-32587

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pickupp WooCommerce Pickupp wc-pickupp allows PHP Local File Inclusion.This issue affects WooCommerce Pickupp: from n/a through = 2.4.3...

CVE-2025-32585

Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP Local File Inclusion.This issue affects Shop Products Filter: from n/a through = 1.2...

CVE-2025-22279

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Crocoblock JetCompareWishlist jet-compare-wishlist allows PHP Local File Inclusion.This issue affects JetCompareWishlist: from n/a through = 1.5.9...

CVE-2025-30582

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in aytechnet DyaPress ERP/CRM dyapress allows PHP Local File Inclusion.This issue affects DyaPress ERP/CRM: from n/a through = 18.0.2.0...

CVE-2025-32587

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pickupp WooCommerce Pickupp wc-pickupp allows PHP Local File Inclusion.This issue affects WooCommerce Pickupp: from n/a through = 2.4.3...

CVE-2025-32585

Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP Local File Inclusion.This issue affects Shop Products Filter: from n/a through = 1.2...

CVE-2025-32519

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Foysal Imran IDonate idonate allows PHP Local File Inclusion.This issue affects IDonate: from n/a through = 2.1.18...