CVE-2025-30820

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in HT Plugins WishSuite wishsuite allows PHP Local File Inclusion.This issue affects WishSuite: from n/a through = 1.4.4...

CVE-2025-30814

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in RadiusTheme The Post Grid the-post-grid allows PHP Local File Inclusion.This issue affects The Post Grid: from n/a through = 7.7.17...

CVE-2025-30891

CVE-2025-30891 affects WordPress plugin “WpTravelly” (Tour & Travel Booking Plugin for WooCommerce). The description in the initial document indicates an improper control of filename for include/require statements in PHP, enabling PHP Local File Inclusion (LFI) via a Remote File Inclusion vulnera...

CVE-2025-30891 WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in magepeopleteam WpTravelly tour-booking-manager allows PHP Local File Inclusion.This issue affects WpTravelly: from n/a through = 1.8.7...

CVE-2025-30871

CVE-2025-30871 is a WordPress vulnerability in the WP Travel Engine plugin caused by improper control of filenames for include/require statements , enabling unauthenticated access to a PHP Local File Inclusion (LFI). Affected versions: WP Travel Engine

CVE-2025-30868

CVE-2025-30868 concerns the Team Manager plugin for WordPress. The vulnerability is Local File Inclusion via an improper include/require in a PHP component, leading to potential code exposure or execution. It affects Team Manager up to version 2.1.23 and is exploitable by an authenticated attacke...

CVE-2025-30846

CVE-2025-30846 — In the WordPress plugin Restaurant Menu by MotoPress , there is an improper validation in PHP include/require that enables a local file inclusion vulnerability. Affected: versions up to 2.4.4. The vulnerability is described as an authenticated Local File Inclusion (LFI) exposure;...

CVE-2025-30845

CVE-2025-30845 affects The Pack Elementor addon (The Pack Elementor addons) up to version 2.1.1. The vulnerability is an authenticated Local File Inclusion via improper control of the filename used in PHP include/require statements. Wordfence details list this CVE as an authenticated LFI issue wi...

PT-2025-13104 · Themify · Themify Event Post

Name of the Vulnerable Software and Affected Versions: Themify Event Post versions 1.3.2 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local Fi...

PT-2025-13068 · Unknown · Subscribe To Download Lite

Name of the Vulnerable Software and Affected Versions: Subscribe to Download Lite versions 1.2.9 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion'. This allows PHP Local File...

PT-2025-13113

Name of the Vulnerable Software and Affected Versions Restaurant Menu by MotoPress versions 2.4.4 and earlier Description The issue affects the Restaurant Menu by MotoPress plugin, allowing PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program,...

PT-2025-13095 · Ht Plugins · Ht Plugins Wishsuite

Name of the Vulnerable Software and Affected Versions: HT Plugins WishSuite versions 1.4.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusio...

PT-2025-13141

Name of the Vulnerable Software and Affected Versions SuitePlugins Login Widget for Ultimate Member versions 1.1.2 and earlier Description The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows...

PT-2025-13089 · Radiustheme · Radiustheme The Post Grid

Name of the Vulnerable Software and Affected Versions: RadiusTheme The Post Grid versions n/a through 7.7.17 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP...

CVE-2025-28916

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Rashid Docpro docpro allows PHP Local File Inclusion.This issue affects Docpro: from n/a through = 2.0.1...

CVE-2025-26986

The CVE-2025-26986 entry concerns Pearl - Corporate Business WordPress theme (StylemixThemes). Affected component is PHP code handling include/require in the WordPress/PHP environment, enabling Local File Inclusion due to improper filename control, effectively a PHP Remote File Inclusion style is...

CVE-2025-27015

CVE-2025-27015: WordPress Hostiko theme (designingmedia)

CVE-2025-28916 WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Rashid Docpro docpro allows PHP Local File Inclusion.This issue affects Docpro: from n/a through = 2.0.1...

CVE-2025-23937

CVE-2025-23937 is a Local File Inclusion (LFI) vulnerability in the WordPress plugin LinkedIn Lite (versions

PT-2025-12939

Name of the Vulnerable Software and Affected Versions Hostiko versions prior to 30.1 Description The issue affects the Hostiko software, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion...