Browse CVEs

HIGH 8.1 CVE-2025-69037 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Pippo pippo allow… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-69038 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Hyori hyori allow… Mitigation only Fix from $1,9502026-01-22 HIGH 7.5 CVE-2025-68913 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Miion miion allow… Mitigation only Fix from $1,9502026-01-22 HIGH 7.5 CVE-2025-68905 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jegtheme JNews - Pay Writer … Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-68908 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in temash Barberry barberry all… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-68510 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeGoods Photography photo… Mitigation only Fix from $1,9502026-01-22 HIGH 7.5 CVE-2025-67955 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP MyHome Core myhom… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-67957 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TangibleWP Listivo Core list… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-67946 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scriptsbundle AdForest adfor… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-67938 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Biagiotti biag… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-67940 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Powerlift powe… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-67941 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle thea… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-67615 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bslthemes Myour myour allows… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-67616 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Mella mella allows … Mitigation only Fix from $1,9502026-01-22 HIGH 7.5 CVE-2025-63017 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes WerkStatt Plugin … Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-54003 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Depot depot al… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-49994 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Athens athens allow… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-50003 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Amuli amuli allo… Mitigation only Fix from $1,9502026-01-22 HIGH 8.1 CVE-2025-47474 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ninetheme Anarkali anarkali … Mitigation only Fix from $1,9502026-01-22 CRITICAL 9.8 CVE-2025-14502 The News and Blog Designer Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1 via the templa… Mitigation only Fix from $2,3002026-01-14 MEDIUM 5.5 CVE-2022-50897 mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameter… Mpdf No fix yet Fix from $1,6002026-01-13 HIGH 7.5 CVE-2026-22521 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in G5Theme Handmade Framework h… Mitigation only Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67934 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wel… Wellspring 2.8+ Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67935 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optim… Optimize 2.4+ Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67936 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly al… Curly 3.3+ Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67937 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon … Hendon 1.7+ Fix from $1,9502026-01-08 HIGH 7.5 CVE-2025-67925 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Corpkit corpkit a… Mitigation only Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-67920 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Neo Ocular neo… Mitigation only Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-22509 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TMRW-studio Atlas atlas allo… Mitigation only Fix from $1,9502026-01-08 HIGH 8.1 CVE-2025-22707 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Moody tm-moody all… Moody after 2.7.3 Fix from $1,9502026-01-08