Vulnerability index

Browse CVEs

1,270 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness PHP File Inclusion (RFI/LFI)CWE-98 × clear
HIGH 8.1 CVE-2025-53207 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Travel WP Travel Gutenber… Mitigation only Fix from $1,9502025-08-20 HIGH 7.5 CVE-2025-53210 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bdthemes ZoloBlocks zolobloc… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-53198 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez houzez all… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-49889 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT edge-cp… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-49892 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Uxper Booking uxper-bo… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-49894 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP L… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-49426 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dahz Kitring kitring allows … Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-49436 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Anotte anotte-wp a… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-48171 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store cena allo… Mitigation only Fix from $1,9502025-08-20 HIGH 7.5 CVE-2025-48298 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Benjamin Denis SEOPress for … Mitigation only Fix from $1,9502025-08-20 HIGH 7.5 CVE-2025-48302 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roxnor FundEngine wp-fundrai… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-48157 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Michele Giorgi Formality for… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-48160 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Caliris caliris-wp… Mitigation only Fix from $1,9502025-08-20 HIGH 8.1 CVE-2025-48149 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in dedalx Cook&Meal cookandmeal… Mitigation only Fix from $1,9502025-08-20 HIGH 8.8 CVE-2025-8142 The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'header_layout' parameter. … Mitigation only Fix from $1,9502025-08-16 MEDIUM 6.6 CVE-2024-8393 The Woocommerce Blocks – Woolook plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.0 via the via t… Mitigation only Fix from $1,6002025-08-16 HIGH 7.5 CVE-2025-7650 The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.0.53 via the 'bizcalv' short… Mitigation only Fix from $1,9502025-08-15 CRITICAL 9.8 CVE-2025-54701 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Unicamp unicamp al… Unicamp 2.6.4+ Fix from $2,3002025-08-14 CRITICAL 9.8 CVE-2025-54700 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Makeaholic makeaho… Makeaholic 1.8.5+ Fix from $2,3002025-08-14 HIGH 8.1 CVE-2025-54689 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP… Mitigation only Fix from $1,9502025-08-14 HIGH 8.1 CVE-2025-54690 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themeStek Xinterio xinterio … Mitigation only Fix from $1,9502025-08-14 HIGH 7.5 CVE-2025-52806 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in eyecix JobSearch wp-jobsearc… Mitigation only Fix from $1,9502025-08-14 HIGH 8.8 CVE-2025-52732 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RealMag777 GMap Targeting gm… Mitigation only Fix from $1,9502025-08-14 HIGH 7.5 CVE-2025-52728 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Po… Mitigation only Fix from $1,9502025-08-14 HIGH 7.5 CVE-2025-52716 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Acato WP REST Cache wp-rest-… Mitigation only Fix from $1,9502025-08-14 HIGH 7.5 CVE-2025-49271 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GravityWP GravityWP - Merge … Mitigation only Fix from $1,9502025-08-14 HIGH 7.5 CVE-2025-49264 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cloud Infrastructure Service… Mitigation only Fix from $1,9502025-08-14 CRITICAL 9.8 CVE-2025-48293 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dylan Kuhn Geo Mashup geo-m… Mitigation only Fix from $2,3002025-08-14 HIGH 7.5 CVE-2025-48332 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress Gutenberg Block… Mitigation only Fix from $1,9502025-08-14 HIGH 8.1 CVE-2025-49036 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in octagonwebstudio Premium Add… Mitigation only Fix from $1,9502025-08-14