Vulnerability index

Browse CVEs

1,270 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness PHP File Inclusion (RFI/LFI)CWE-98 × clear
Unclassified HIGH 8.1
CVE-2025-69037

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Pippo pippo allow…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-69038

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Hyori hyori allow…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 7.5
CVE-2025-68913

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Miion miion allow…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 7.5
CVE-2025-68905

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jegtheme JNews - Pay Writer …

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-68908

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in temash Barberry barberry all…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-68510

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeGoods Photography photo…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 7.5
CVE-2025-67955

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP MyHome Core myhom…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-67957

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP Listivo Core list…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-67946

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scriptsbundle AdForest adfor…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-67938

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Biagiotti biag…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-67940

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Powerlift powe…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-67941

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle thea…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-67615

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bslthemes Myour myour allows…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-67616

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Mella mella allows …

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 7.5
CVE-2025-63017

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes WerkStatt Plugin …

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-54003

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Depot depot al…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-49994

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Athens athens allow…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-50003

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Amuli amuli allo…

Mitigation only
Fix from $1,950 2026-01-22
Unclassified HIGH 8.1
CVE-2025-47474

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ninetheme Anarkali anarkali …

Mitigation only
Fix from $1,950 2026-01-22
Unclassified CRITICAL 9.8
CVE-2025-14502

The News and Blog Designer Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1 via the templa…

Mitigation only
Fix from $2,300 2026-01-14
Mpdf MEDIUM 5.5
CVE-2022-50897

mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameter…

No fix yet
Fix from $1,600 2026-01-13
Unclassified HIGH 7.5
CVE-2026-22521

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in G5Theme Handmade Framework h…

Mitigation only
Fix from $1,950 2026-01-08
Wellspring HIGH 8.1
CVE-2025-67934

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wel…

Fix: 2.8+
Fix from $1,950 2026-01-08
Optimize HIGH 8.1
CVE-2025-67935

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optim…

Fix: 2.4+
Fix from $1,950 2026-01-08
Curly HIGH 8.1
CVE-2025-67936

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly al…

Fix: 3.3+
Fix from $1,950 2026-01-08
Hendon HIGH 8.1
CVE-2025-67937

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon …

Fix: 1.7+
Fix from $1,950 2026-01-08
Unclassified HIGH 7.5
CVE-2025-67925

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Corpkit corpkit a…

Mitigation only
Fix from $1,950 2026-01-08
Unclassified HIGH 8.1
CVE-2025-67920

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Neo Ocular neo…

Mitigation only
Fix from $1,950 2026-01-08
Unclassified HIGH 8.1
CVE-2025-22509

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TMRW-studio Atlas atlas allo…

Mitigation only
Fix from $1,950 2026-01-08
Moody HIGH 8.1
CVE-2025-22707

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Moody tm-moody all…

Fix: after 2.7.3
Fix from $1,950 2026-01-08