Vulnerability index

Browse CVEs

1,270 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness PHP File Inclusion (RFI/LFI)CWE-98 × clear
Unclassified HIGH 8.1
CVE-2025-68506

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nawawi Jamili Docket Cache d…

Mitigation only
Fix from $1,950 2025-12-24
Cmsimple HIGH 7.8
CVE-2021-47734

CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute ar…

No fix yet
Fix from $1,950 2025-12-23
Unclassified HIGH 7.5
CVE-2025-68560

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Ele…

Mitigation only
Fix from $1,950 2025-12-23
Unclassified HIGH 7.5
CVE-2025-68544

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP…

Mitigation only
Fix from $1,950 2025-12-23
Unclassified HIGH 7.5
CVE-2025-68546

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP…

Mitigation only
Fix from $1,950 2025-12-23
Zimbra Collaboration Suite HIGH 8.8
CVE-2025-68645 KEVEPSS 34%

A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling …

Fix: 10.0.18 / 10.1.13+
Fix from $1,950 2025-12-22
Unclassified HIGH 8.8
CVE-2025-13641

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, a…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-6326

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset inset all…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-64373

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in shinetheme Traveler traveler…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-64377

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CridioStudio ListingPro list…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-64223

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign PenNews pennews …

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-64193

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in 8theme XStore xstore allows …

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-64205

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows…

Mitigation only
Fix from $1,950 2025-12-18
Minimogwp HIGH 8.1
CVE-2025-60069

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MinimogWP minimog …

Fix: after 3.9.6
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-60071

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Riode riode allow…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-60072

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Processby Anchor smooth scro…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-60076

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jiro Sasamoto Ray Enterprise…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 7.5
CVE-2025-60078

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Agence web Eoxia – Montpelli…

Mitigation only
Fix from $1,950 2025-12-18
Kicker HIGH 8.1
CVE-2025-60061

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Kicker kicker al…

Fix: after 2.2.0
Fix from $1,950 2025-12-18
Rosalinda HIGH 8.1
CVE-2025-60063

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rosalinda rosali…

Fix: after 1.2.3
Fix from $1,950 2025-12-18
Renewal HIGH 8.1
CVE-2025-60064

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Renewal renewal …

Fix: after 1.2.2
Fix from $1,950 2025-12-18
Pinevale HIGH 8.1
CVE-2025-60065

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pinevale pineval…

Fix: after 1.0.14
Fix from $1,950 2025-12-18
Katelyn HIGH 8.1
CVE-2025-60066

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Katelyn katelyn …

Fix: after 1.0.10
Fix from $1,950 2025-12-18
Giardino HIGH 8.1
CVE-2025-60067

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Giardino giardin…

Fix: after 1.1.10
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-60054

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes OnLeash onleash…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-60055

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Fabrica fabrica…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-60056

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Winger winger a…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-60057

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes DJ Rainflow dj-…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.1
CVE-2025-60058

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes DetailX detailx…

Mitigation only
Fix from $1,950 2025-12-18
Smartseo HIGH 8.1
CVE-2025-60059

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartS…

Fix: after 2.12
Fix from $1,950 2025-12-18