Vulnerability index

Browse CVEs

1,269 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Filtering by weakness PHP File Inclusion (RFI/LFI)CWE-98 × clear

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegada…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr. Cobbler mr-…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nelson nelson allow…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ProLingua prolingua…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Amoli amoli al…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspar…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Good Homes good-hom…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville gree…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hy…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent lauren…

Mitigation only

Fix from $1,950 2026-03-25

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella al…

Mitigation only

Fix from $1,950 2026-03-25

Avideo HIGH 7.5

WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated API endpoint (`APIName=locale`) concatenates u…

Fix: after 26.0

Fix from $1,950 2026-03-23

Uptime Kuma MEDIUM 6.5

Uptime Kuma is an open source, self-hosted monitoring tool. In versions 1.23.0 through 2.2.0, the fix from GHSA-vffh-c9pq-4crh doesn't fully work to …

Fix from $1,600 2026-03-20

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Melania allows PHP …

Mitigation only

Fix from $1,950 2026-03-20

Unclassified CRITICAL 9.8

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress BuilderPress build…

Mitigation only

Fix from $2,300 2026-03-19

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Tripgo tripgo allow…

Mitigation only

Fix from $1,950 2026-03-19

Aapanel HIGH 7.5

A lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion (LFI), leadingot sensitive information exposure.

Fix from $1,950 2026-03-18

Unclassified HIGH 8.8

The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, a…

Mitigation only

Fix from $1,950 2026-03-18

Ldap Account Manager HIGH 8.8

LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to version 9.…

Fix from $1,950 2026-03-18

Unclassified HIGH 7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Medilazar Core me…

Mitigation only

Fix from $1,950 2026-03-13

Unclassified HIGH 7.2

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by…

Mitigation only

Fix from $1,950 2026-03-13

Unclassified HIGH 7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemetechMount Boldman boldm…

Mitigation only

Fix from $1,950 2026-03-13

Unclassified HIGH 7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly gre…

Mitigation only

Fix from $1,950 2026-03-13

Unclassified HIGH 7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Creatives_Planet Greenly The…

Mitigation only

Fix from $1,950 2026-03-13

Unclassified HIGH 7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam WpBookingly s…

Mitigation only

Fix from $1,950 2026-03-13

Unclassified HIGH 7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Medilink-Core me…

Mitigation only

Fix from $1,950 2026-03-13

Unclassified HIGH 7.5

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in redqteam Turbo Manager turbo…

Mitigation only

Fix from $1,950 2026-03-13

Organization Portal System CRITICAL 9.8

IFTOP developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the se…

Mitigation only

Fix from $2,300 2026-03-11

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Veil veil allow…

Mitigation only

Fix from $1,950 2026-03-05

Unclassified HIGH 8.1

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notari…

Mitigation only

Fix from $1,950 2026-03-05