CVE-2025-31097

CVE-2025-31097 is an unauthenticated Local File Inclusion vulnerability in the Material Dashboard WordPress plugin (Material Dashboard). The issue stems from improper control of the filename used in include/require statements, enabling local file inclusion. Affected versions are up to and includi...

CVE-2025-31082

CVE-2025-31082 affects News & Blog Designer Pack (WordPress plugin) via an Improper Control of Filename for Include/Require in PHP, enabling Local File Inclusion. Public details in connected docs indicate the issue affects versions up to 4.0 (no specific fixed version listed in Initial text; but ...

CVE-2025-31082 WordPress News & Blog Designer Pack plugin <= 4.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in InfornWeb News & Blog Designer Pack allows PHP Local File Inclusion. This issue affects News & Blog Designer Pack: from n/a through 4.0...

CVE-2025-30892

WpTravelly (WordPress Tour & Travel Booking Plugin) has a Deserialization of Untrusted Data vulnerability enabling PHP Object Injection in versions up to 1.8.7. The vulnerability has a high overall impact (CVSS 3.1: 8.8) affecting confidentiality, integrity, and availability. The issue is labeled...

CVE-2025-1219 affecting package php for versions less than 8.1.32-1

CVE-2025-1219 affecting package php for versions less than 8.1.32-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-1217 affecting package php for versions less than 8.1.32-1

CVE-2025-1217 affecting package php for versions less than 8.1.32-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-1219 affecting package php for versions less than 8.3.19-1

CVE-2025-1219 affecting package php for versions less than 8.3.19-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-1861 affecting package php for versions less than 8.3.19-1

CVE-2025-1861 affecting package php for versions less than 8.3.19-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-1736 affecting package php for versions less than 8.3.19-1

CVE-2025-1736 affecting package php for versions less than 8.3.19-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-30901

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through = 2.9.2...

CVE-2025-30849

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in g5theme Essential Real Estate essential-real-estate allows PHP Local File Inclusion.This issue affects Essential Real Estate: from n/a through = 5.2.0...

CVE-2025-30870

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

CVE-2025-30782

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Shuffle Subscribe to Download Lite subscribe-to-download-lite allows PHP Local File Inclusion.This issue affects Subscribe to Download Lite: from n/a through = 1.2.9...

CVE-2025-30901 WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JoomSky JS Help Desk js-support-ticket allows PHP Local File Inclusion.This issue affects JS Help Desk: from n/a through = 2.9.2...

CVE-2025-30901

CVE-2025-30901 affects WordPress JS Help Desk (JS Help Desk plugin) and is an unauthenticated Local File Inclusion via improper filename handling in PHP includes. The vulnerability affects JS Help Desk

CVE-2025-30870 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

CVE-2025-30870 WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in WP Travel Engine WP Travel Engine wp-travel-engine allows PHP Local File Inclusion.This issue affects WP Travel Engine: from n/a through = 6.3.5...

CVE-2025-30849 WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in g5theme Essential Real Estate essential-real-estate allows PHP Local File Inclusion.This issue affects Essential Real Estate: from n/a through = 5.2.0...

CVE-2025-30849 WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in g5theme Essential Real Estate essential-real-estate allows PHP Local File Inclusion.This issue affects Essential Real Estate: from n/a through = 5.2.0...

CVE-2025-30849

CVE-2025-30849 affects Essential Real Estate (WordPress plugin). Issue: Improper control of filename for include/require enables Local File Inclusion in PHP. Affected: Essential Real Estate