Vulnerability index

Browse CVEs

1,270 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness PHP File Inclusion (RFI/LFI)CWE-98 × clear
Unclassified HIGH 8.1
CVE-2025-53207

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenber…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 7.5
CVE-2025-53210

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bdthemes ZoloBlocks zolobloc…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-53198

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez houzez all…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-49889

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT edge-cp…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-49892

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Uxper Booking uxper-bo…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-49894

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP L…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-49426

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dahz Kitring kitring allows …

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-49436

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Anotte anotte-wp a…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-48171

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store cena allo…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 7.5
CVE-2025-48298

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Benjamin Denis SEOPress for …

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 7.5
CVE-2025-48302

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roxnor FundEngine wp-fundrai…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-48157

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Michele Giorgi Formality for…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-48160

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Caliris caliris-wp…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.1
CVE-2025-48149

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx Cook&Meal cookandmeal…

Mitigation only
Fix from $1,950 2025-08-20
Unclassified HIGH 8.8
CVE-2025-8142

The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'header_layout' parameter. …

Mitigation only
Fix from $1,950 2025-08-16
Unclassified MEDIUM 6.6
CVE-2024-8393

The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via t…

Mitigation only
Fix from $1,600 2025-08-16
Unclassified HIGH 7.5
CVE-2025-7650

The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.0.53 via the 'bizcalv' short…

Mitigation only
Fix from $1,950 2025-08-15
Unicamp CRITICAL 9.8
CVE-2025-54701

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp al…

Fix: 2.6.4+
Fix from $2,300 2025-08-14
Makeaholic CRITICAL 9.8
CVE-2025-54700

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic makeaho…

Fix: 1.8.5+
Fix from $2,300 2025-08-14
Unclassified HIGH 8.1
CVE-2025-54689

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP…

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 8.1
CVE-2025-54690

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themeStek Xinterio xinterio …

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 7.5
CVE-2025-52806

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in eyecix JobSearch wp-jobsearc…

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 8.8
CVE-2025-52732

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 GMap Targeting gm…

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 7.5
CVE-2025-52728

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Po…

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 7.5
CVE-2025-52716

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Acato WP REST Cache wp-rest-…

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 7.5
CVE-2025-49271

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GravityWP GravityWP - Merge …

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 7.5
CVE-2025-49264

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cloud Infrastructure Service…

Mitigation only
Fix from $1,950 2025-08-14
Unclassified CRITICAL 9.8
CVE-2025-48293

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-m…

Mitigation only
Fix from $2,300 2025-08-14
Unclassified HIGH 7.5
CVE-2025-48332

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress Gutenberg Block…

Mitigation only
Fix from $1,950 2025-08-14
Unclassified HIGH 8.1
CVE-2025-49036

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in octagonwebstudio Premium Add…

Mitigation only
Fix from $1,950 2025-08-14