CVE-2025-23945

CVE-2025-23945 affects the WordPress Popliup plugin up to version 1.1.1. The issue is an improper control of filename for include/require in a PHP program, enabling local file inclusion (LFI) through PHP Remote File Inclusion mechanics. The vulnerability stems from the plugin’s handling of includ...

PT-2025-9489

Name of the Vulnerable Software and Affected Versions Doctor Appointment Booking versions 1.0.0 and earlier Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, in the Doctor...

CVE-2025-26964

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File Inclusion.This issue affects Eventin: from n/a through = 4.0.20...

CVE-2025-26985

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through = 1.0.6...

CVE-2025-26979

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows PHP Local File Inclusion.This issue affects Funnel Builder by FunnelKit: from n/a through = 3.9.0...

CVE-2025-26957

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Deetronix Affiliate Coupons affiliate-coupons allows PHP Local File Inclusion.This issue affects Affiliate Coupons: from n/a through = 1.7.3...

CVE-2025-26964

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File Inclusion.This issue affects Eventin: from n/a through = 4.0.20...

CVE-2025-26957

CVE-2025-26957 affects the WordPress plugin Affiliate Coupons (Affiliate Coupons – The #1 Coupon Display Plugin for Affiliate Marketers). Connected data confirms an Authenticated (Contributor+) Local File Inclusion vulnerability in Affiliate Coupons

CVE-2025-26957 WordPress Affiliate Coupons plugin <= 1.7.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Deetronix Affiliate Coupons affiliate-coupons allows PHP Local File Inclusion.This issue affects Affiliate Coupons: from n/a through = 1.7.3...

CVE-2025-26932

CVE-2025-26932 affects WPBot (WordPress WPBot ChatBot). The vulnerability is an authenticated Local File Inclusion (LFI) due to improper control of include/require statements. Affected versions are ChatBot up to 6.3.5. Patch status: Patched in the available update.

CVE-2025-26932 WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through = 6.3.5...

CVE-2025-26985

CVE-2025-26985 (Majestic Support plugin) is an Unauthenticated Local File Inclusion in Majestic Support (WordPress plugin) reported to affect versions up to 1.0.6. Exploit path involves improper filename handling for PHP include/require, enabling LFI. The CVE entry has an 8.1 base score (network ...

PT-2025-7876

Name of the Vulnerable Software and Affected Versions FunnelKit Funnel Builder versions through 3.9.0 Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local...

CVE-2025-26979: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows PHP Local File Inclusion.This issue affects Funnel Builder by FunnelKit: from n/a through = 3.9.0...

CVE-2025-26985: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Majestic Support Majestic Support majestic-support allows PHP Local File Inclusion.This issue affects Majestic Support: from n/a through = 1.0.6...

CVE-2025-27272

CVE-2025-27272 is a Local File Inclusion vulnerability in the WordPress plugin VG PostCarousel (affected versions: from n/a through 1.1). The issue arises from improper control of the filename used in PHP Include/Require statements, enabling potential local file access. Connected vulnerability so...

CVE-2025-26757

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in FULL SERVICES FULL Customer full-customer allows PHP Local File Inclusion.This issue affects FULL Customer: from n/a through = 3.1.26...

CVE-2025-26760

CVE-2025-26760: WordPress Calculator Builder plugin

CVE-2025-26757 WordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in FULL SERVICES FULL Customer full-customer allows PHP Local File Inclusion.This issue affects FULL Customer: from n/a through = 3.1.26...

CVE-2025-22656

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Oscar Alvarez Cookie Monster cookie-monster allows PHP Local File Inclusion.This issue affects Cookie Monster: from n/a through = 1.2.2...