Vulnerability index

Browse CVEs

1,270 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness PHP File Inclusion (RFI/LFI)CWE-98 × clear
HIGH 8.1 CVE-2025-68506 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nawawi Jamili Docket Cache d… Mitigation only Fix from $1,9502025-12-24 HIGH 7.8 CVE-2021-47734 CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute ar… Cmsimple No fix yet Fix from $1,9502025-12-23 HIGH 7.5 CVE-2025-68560 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Ele… Mitigation only Fix from $1,9502025-12-23 HIGH 7.5 CVE-2025-68544 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP… Mitigation only Fix from $1,9502025-12-23 HIGH 7.5 CVE-2025-68546 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP… Mitigation only Fix from $1,9502025-12-23 HIGH 8.8 CVE-2025-68645 KEVEPSS 34% A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling … Zimbra Collaboration Suite 10.0.18 / 10.1.13+ Fix from $1,9502025-12-22 HIGH 8.8 CVE-2025-13641 The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, a… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-6326 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset inset all… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-64373 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in shinetheme Traveler traveler… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-64377 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CridioStudio ListingPro list… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-64223 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign PenNews pennews … Mitigation only Fix from $1,9502025-12-18 HIGH 7.5 CVE-2025-64193 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in 8theme XStore xstore allows … Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-64205 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60069 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove MinimogWP minimog … Minimogwp after 3.9.6 Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60071 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Riode riode allow… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60072 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Processby Anchor smooth scro… Mitigation only Fix from $1,9502025-12-18 HIGH 7.5 CVE-2025-60076 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jiro Sasamoto Ray Enterprise… Mitigation only Fix from $1,9502025-12-18 HIGH 7.5 CVE-2025-60078 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Agence web Eoxia – Montpelli… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60061 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Kicker kicker al… Kicker after 2.2.0 Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60063 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rosalinda rosali… Rosalinda after 1.2.3 Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60064 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Renewal renewal … Renewal after 1.2.2 Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60065 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pinevale pineval… Pinevale after 1.0.14 Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60066 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Katelyn katelyn … Katelyn after 1.0.10 Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60067 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Giardino giardin… Giardino after 1.1.10 Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60054 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes OnLeash onleash… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60055 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Fabrica fabrica… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60056 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Winger winger a… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60057 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes DJ Rainflow dj-… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60058 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes DetailX detailx… Mitigation only Fix from $1,9502025-12-18 HIGH 8.1 CVE-2025-60059 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartS… Smartseo after 2.12 Fix from $1,9502025-12-18