Каталог уязвимостей - CWE-98

В сервис интегрированы наиболее популярные публичных базы знаний:

Сертификаты СЗИ - Государственный реестр сертифицированных средств защиты информации опубликованный Федеральной службой по техническому и экспортному контролю, может быть использован для контроля актуальности используемых СЗИ в организации.
CWE уязвимости - общедоступная публичная база распространенных типов уязвимостей в программном и аппаратном обеспечении, которые могут иметь последствия для безопасности - Common weakness enumeration.
CVE уязвимости - общедоступная публичная база уязвимостей Common Vulnerabilities and Exposures (CVE). Миссия программы CVE заключается в выявлении, определении и каталогизации публично раскрываемых уязвимостей в сфере кибербезопасности. Для каждой уязвимости в каталоге существует одна запись CVE. Уязвимости обнаруживаются, затем присваиваются и публикуются организациями по всему миру, которые сотрудничают с программой CVE. Партнеры публикуют записи CVE для единообразного описания уязвимостей. Специалисты в области информационных технологий и кибербезопасности используют записи CVE, чтобы убедиться, что они обсуждают одну и ту же проблему, и координировать свои усилия по определению приоритетности и устранению уязвимостей.
БДУ ФСТЭК уязвимости - раздел Уязвимости Банка данных уязвимостей опубликованная Федеральной службой по техническому и экспортному контролю совместно с Государственным научно-исследовательским испытательным институтом проблем технической защиты информации. Одной из целей создания банка данных угроз безопасности информации является объединение специалистов в области информационной безопасности для решения задач повышения защищенности информационных систем.
НКЦКИ уязвимости - общедоступная публичная база уязвимостей Национального координационного центра по компьютерным инцидентам (НКЦКИ), обеспечивающего координацию деятельности субъектов КИИ по обнаружению, предупреждению, ликвидации последствий компьютерных атак и реагированию на компьютерные инциденты.
MITRE ATT&CK – Adversarial Tactics, Techniques & Common Knowledge – Тактики, техники и общеизвестные знания о злоумышленниках. Это основанная на реальных наблюдениях база знаний компании Mitre, содержащая описание тактик, приемов и методов, используемых киберпреступниками. База создана в 2013 году и регулярно обновляется, цель – составление структурированной матрицы используемых киберпреступниками приемов, чтобы упростить задачу реагирования на киберинциденты.
БДУ ФСТЭК и Новая БДУ ФСТЭК – раздел Угрозы Банка данных угроз, опубликованный в 2015 году Федеральной службой по техническому и экспортному контролю и Государственным научно-исследовательским испытательным институтом проблем технической защиты информации, обязателен при моделировании угроз при построении систем защиты персональных данных, критической информационной инфраструктуры, государственных информационных систем.

Каталог Справка открывает раздел документации по каталогам.

Уязвимости CVE, БДУ ФСТЭК и НКЦКИ

Каталоги CVE уязвимости, БДУ ФСТЭК уязвимости и НКЦКИ уязвимости предоставляют дополнительный контент и обогащают информацией описание уязвимостей от сканеров в модуле Технические уязвимости.

Интерфейс каталогов идентичен и содержит следующие блоки:

Метрики:
- Найденные уязвимости – отображает количество найденных в отчетах от сканеров уязвимостей которые связаны с уязвимостями из каталога, при нажатии на виджет перенаправляет в модуль Технические уязвимости с установленным фильтром по названию каталога (тип фильтра Группа уязвимостей);
- Уязвимые хосты – отображает количество хостов на которых обнаружены уязвимости связанные с уязвимостями из каталога, при нажатии на виджет перенаправляет в модуль Технические уязвимости с установленным фильтром по названию каталога (тип фильтра Группа уязвимостей).
Табличную часть Каталог уязвимостей:
- Фильтр по полю Идентификатор - особенностью данного фильтра является автоматический разбор текста с последующим извлечением из текста идентификаторов. Для этого необходимо вставить произвольный текст с идентификаторами в поле и добавить в фильтр через кнопку плюс;
- Табличную часть с полями для каталогов CVE и БДУ ФСТЭК:
  - Идентификатор - id уязвимости в базе уязвимостей;
  - Описание - текстовое описание уязвимости;
  - Обнаружено - флаг, данный статус отображается если уязвимость обнаружена в отчетах о сканировании;
  - CVSS - числовая оценка уязвимости согласно источнику, с указанием даты выявления уязвимости экспертами, оценка отображается цветом согласно оценке CVSS 0.1 – 3.9 Low Зеленый,
    4.0 – 6.9 Medium Желтый, 7.0 – 8.9 High Оранжевый, 9.0 – 10.0 Critical Красный.
- Табличную часть с полями для каталогов CVE :
  - Дата бюллетеня - информация о дате публикации бюллетеня содержащего уязвимости;
  - Идентификатор - id уязвимости в базе уязвимостей;
  - Информация - текстовое описание уязвимости;
  - Вектор атаки - локальный или сетевой вектор атаки;
  - Обнаружено - флаг, данный статус отображается если уязвимость обнаружена в отчетах о сканировании;
  - Наличие обновления - - флаг, данный статус отображается если база уязвимостей содержит информацию о наличии обновлений от производителя уязвимого ПО;
  - Дата выявления - даты выявления уязвимости экспертами.
- Чекбокс «Только обнаруженные уязвимости» - устанавливает фильтр на табличную часть для отображения только обнаруженные уязвимости.
- Функционал для экспорта всех уязвимостей каталога.
- Для каталога добавляется функционал Варианты отображения:
  - Бюллетени - изменяет отображение табличной части на реестр бюллетеней, отображает общее количество уязвимостей в бюллетени в поле Уязвимостей в бюллетени и статус по обнаружению в поле Обнаружено - данный статус отображается если хотя бы одна уязвимость из бюллетеня обнаружена в инфраструктуре.
  - Уязвимости.

MITRE ATT&CK, БДУ ФСТЭК, Новая БДУ ФСТЭК

Данные из каталогов MITRE ATT&CK, БДУ ФСТЭК, Новая БДУ ФСТЭК могут использоваться для контекстного наполнения риска в модуле Риски.

Каждый из указанных каталогов сформирован по собственной схеме данных, которая не соответствует подходу оценки риска, используемому в сервисе. Но в основе своей указанные базы описывают все те же риски информационной безопасности, каждый под своим углом. Поэтому они добавлены в сервис и как отдельные компоненты и как основа для создания рисков, угроз или уязвимостей.

Каталоги могут использоваться в сервисе с целью:

Облегчения процесса формирования рисков, угроз и уязвимостей;
Обогащения информации по рискам (угрозам, уязвимостям) созданным в сервисе.
Взгляда на компанию и оценку рисков через публичные каталоги угроз.

Сервис позволяет установить связь между объектами из каталогов и 3 типами объектов сервиса: угрозами, уязвимостями или рисками безопасности:

Уязвимости могут быть связаны с угрозами БДУ ФСТЭК, техниками ATT&CK и способами реализации Новой БДУ ФСТЭК.
Угрозы могут быть связаны с угрозами БДУ ФСТЭК, техниками ATT&CK, угрозами и последствиями Новой БДУ ФСТЭК.
Риски могут быть связаны с угрозами БДУ ФСТЭК, техниками ATT&CK, угрозами, способами реализации и последствиями Новой БДУ ФСТЭК.

Такой широкий выбор возможных связей сделан потому, что объекты из каталогов угроз могут быть или угрозой или уязвимостью в контексте сервиса.

Например, УБИ.004 Угроза аппаратного сброса пароля BIOS из БДУ ФСТЭК в контексте сервиса является уязвимостью, особенностью активов типа Микропрограммное обеспечение, которая может привести к реализации угрозы Несанкционированного локального доступа к BIOS.

В большинстве случаев угрозы из БДУ ФСТЭК и техники из MITRE ATT@CK являются именно уязвимостями, использование которых ведет к реализации угроз безопасности, но бывают и исключения.

Для рисков, угроз и уязвимостей из базы Community связи с каталогами угроз уже установлены.

Связь с каталогом угроз может быть прямой или косвенной. Например, если уязвимость связана с угрозой из БДУ ФСТЭК то и все риски, в составе которых есть данная уязвимость будут автоматически связаны с угрозой из БДУ ФСТЭК.

Каталог БДУ ФСТЭК - это реестр рисков от банка данных угроз безопасности информации ФСТЭК России.
Каждая угроза содержит описание, рекомендации к каким типам активов может быть применена эта угроза, классификация по свойствам информации и вероятные источники угрозы. Дополнительно в блоке Связанные риски указаны связанные риски, а в блоке Каталоги указываются связи с записями из других каталогов.

Каталог Новая БДУ ФСТЭК от банка данных угроз безопасности информации ФСТЭК России содержит:

матрицу Способы реализации (возникновения угроз) - каждая ячейка которых содержит описание поверхности атаки: группу способов, уровень возможностей нарушителя, возможные реализуемые угрозы, компоненты объектов воздействия, возможные меры защиты;
Негативные последствия - перечень негативных последствий в классификации ФСТЭК в виде кода и описания;
Угрозы - реестр угроз с описанием, каждая угроза содержит возможные объекты воздействия и возможные способы реализации угроз;
Объекты - перечень объектов последствий с описанием и компонентами которые могут входить в состав объекта;
Компоненты - перечень компонентов объектов воздействия с указанием объектов воздействия на которых они могут располагаться;
Нарушители - уровни возможностей нарушителей классифицированные по возможностям и компетенции;
Меры защиты - в терминологии SECURITM это список требований выполнение которых сокращает возможности нарушителя.

Каталог MITRE ATT&CK содержит:

Матрица - содержит тактики и техники злоумышленника, позволяет на основании тактики или техники создать риск или уязвимость, в матрице указаны связи с рисками в базе Community и с рисками в базе команды;
Тактики - направления действия нарушителя на том или ином этапе cyberkillchane;
Техники - конкретные действия нарушителя для достижения цели на конкретном шаге cyberkillchane;
Контрмеры - в терминологии SECURITM это список требований выполнение которых сокращает возможности нарушителя;
Преступные группы - описание APT группировок и их особенности и модель поведения;
Инструменты - ПО используемое нарушителями для вредоносного воздействия.

Матрицы могут использоваться для построения тепловой карты рисков наложенных на матрицы угроз и уязвимостей.

Уязвимости CWE

Каталог CWE уязвимости предоставляет дополнительный контент и обогащают информацией описание уязвимостей от сканеров в модуле Технические уязвимости.

Интерфейс каталогов идентичен и содержит следующие блоки:

Табличную часть Каталог уязвимостей:
- Фильтр по полю Идентификатор;
- Табличную часть с полями:
  - Идентификатор - id уязвимости в базе уязвимостей;
  - Имя - текстовое описание уязвимости;
  - Обнаружено - флаг, данный статус отображается если уязвимость обнаружена в отчетах о сканировании;
- Чекбокс «Только обнаруженные уязвимости» - устанавливает фильтр на табличную часть для отображения только обнаруженные уязвимости.

Сертификаты СЗИ

Каталог Сертификаты СЗИ может быть использован в модуле Активы как источник информации для поля Номер сертификата СЗИ. В модуле активов есть возможность вести реестр СЗИ используемых в организации, в свою очередь каталог сертификатов СЗИ позволяет связать актив с каталогом через поле актива Номер сертификата СЗИ.

Каталог Сертификаты СЗИ содержит реестр с информацией о номере сертификата, сроке действия сертификата и сроке поддержки СЗИ. Кроме реестра каталог содержит следующие метрики:

Имеющиеся СЗИ - отображает количество активов у которых заполнено поле Номер сертификата СЗИ;
Скоро будут просрочены - отображает количество активов у которых срок действия сертификата меньше 90 календарных дней;
Просроченные сертификаты - отображает количество активов у которых срок действия сертификата уже истек;
Истекшая поддержка - отображает количество активов у которых срок действия сертификата уже истек.

Каждая метрика ведёт в реестр активов и выводит список СЗИ, отфильтрованный по соответствующим параметрам.

Нажав на просмотр сертификата, мы увидим карточку сертификата, сервис хранит информацию о следующих данных:

Номер сертификата;
Дата внесения в реестр;
Срок действия сертификата;
Срок окончания тех. поддержки;
Наименование средства (шифр);
Схема сертификации;
Испытательная лаборатория;
Орган по сертификации;
Заявитель;
Наименования документов соответствия;
Реквизиты заявителя.

Реестр обновляется автоматически один раз в месяц.

При выборе или изменении значения поля Номер сертификата СЗИ в карточке актива связанные поля заполняются автоматически из данных сертификата: проставляется признак Сертифицировано, а также срок действия сертификата и срок окончания технической поддержки. При очистке поля Номер сертификата СЗИ эти поля очищаются. Заполнение происходит автоматически, отдельно вносить эти значения вручную не требуется.

Куда я попал?

SECURITM это SGRC система, автоматизирующая процессы в службах информационной безопасности. SECURITM помогает построить и управлять ИСПДн, КИИ, ГИС, СМИБ/СУИБ, банковскими системами защиты.
А еще SECURITM это место для обмена опытом и наработками для служб безопасности.

Подробнее

Наш канал

CWE-98

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

Тип уязвимости:	Не зависит от других уязвимостей
Вероятность эксплойта:	High

Идентификаторы ФСТЭК уязвимостей

Идентификатор, базы данных общеизвестных уязвимостей информационной безопасности

Идентификатор	Описание
BDU:2020-01211	Уязвимость программной платформы ColdFusion, связанная с именами файлов для PHP-функций include или require, позволяющая нарушителю выполнить произвольный PHP код в целевой системе
BDU:2020-05573	Уязвимость компонента /processReportGetter.php КТС "Маяк", позволяющая нарушителю получить доступ на чтение произвольных файлов
BDU:2021-06027	Уязвимость сервера ArcGIS Server, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный HTML-код
BDU:2023-04596	Уязвимость системы управления серверами Cockpit, связанная с неверным управлением именами файлов для PHP-функций include или require, позволяющая нарушителю выполнить произвольный код
BDU:2023-08350	Уязвимость системы управления бизнесом bumsys, связанная с удаленным включением файлов PHP, позволяющая нарушителю выполнить произвольный код
BDU:2024-03557	Уязвимость сценария link.php программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить произвольный код
BDU:2024-04119	Уязвимость функции api_plugin_hook() программного средства мониторинга сети Cacti, позволяющая нарушителю выполнить произвольный код
BDU:2024-10871	Уязвимость микропрограммного обеспечения встраиваемых сетевых контроллеров управления зданиями ASPECT Enterprise, NEXUS Series, MATRIX Series, связанная с неверным управлением именами файлов для PHP-функций include или require, позволяющая нарушителю...
BDU:2024-10990	Уязвимость плагина WP Umbrella: Update Backup Restore Monitoring системы управления содержимым сайта WordPress, позволяющая нарушителю получить несанкционированный доступ к конфиденциальной информации или выполнить произвольный код
BDU:2025-00940	Уязвимость плагина Post Grid, Slider Carousel Ultimate системы управления содержимым сайта WordPress, связанная с неверным управлением именами файлов для PHP-функций include или require, позволяющая нарушителю получить несанкционированный доступ к за...
BDU:2025-01292	Уязвимость микропрограммного обеспечения программируемых логических контроллеров ABB FBXi, FBVi, FBTi и CBXi, связанная с неверным управлением именами файлов для PHP-функций include или require, позволяющая нарушителю повысить свои привилегии и выпол...
BDU:2025-09583	Уязвимость веб-интерфейса информационной системы о государственных и муниципальных платежах Республики Татарстан (ГИС ГМП), связанная с ошибками в логике работы веб-приложения, позволяющая нарушителю получить несанкционированный доступ к защищаемой и...
BDU:2025-11365	Уязвимость программной системы управления активами предприятия IBM Maximo Asset Management, связанная с неограниченной загрузкой файлов опасного типа, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
BDU:2025-14504	Уязвимость плагина Motors - Events системы управления содержимым сайта WordPress, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2025-14536	Уязвимость инструмента визуализации данных NagVis инструмента для мониторинга ИТ-инфраструктуры Nagios XI, позволяющая нарушителю раскрыть конфиденциальную информацию
BDU:2025-16353	Уязвимость компонента RestFilter веб-интерфейса управления корпоративной системы управления электронной почтой Zimbra Collaboration Suite (ZCS), позволяющая нарушителю выполнить произвольный код
BDU:2025-16386	Уязвимость компонента Devnex Addons плагина WordPress Elementor, позволяющая нарушителю оказать воздействие на конциденциальность, целостность и доступность защиаемой информации
BDU:2025-16495	Уязвимость плагина AI Mortgage Calculator системы управления содержимым сайта WordPress, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2026-00001	Уязвимость плагина FULL Customer системы управления содержимым сайта WordPress, связанная с неверным управлением именами файлов для PHP-функций include или require, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации ил...
BDU:2026-00002	Уязвимость плагина Calculator Builder системы управления содержимым сайта WordPress, связанная с неверным управлением именами файлов для PHP-функций include или require, позволяющая нарушителю получить несанкционированный доступ к защищаемой информац...
BDU:2026-05375	Уязвимость модуля NFSen системы сетевого мониторинга LibreNMS, позволяющая нарушителю выполнить произвольный код
BDU:2026-05965	Уязвимость модуля landing сервиса для управления бизнесом Битрикс24 исистемы управления содержимым сайтов (CMS) 1С-Битрикс: Управление сайтом, связанная с неверным управлением именами файлов для PHP-функций include или require, позволяющая нарушителю...

Идентификаторы CVE уязвимостей

Идентификатор, базы данных общеизвестных уязвимостей информационной безопасности

Идентификатор	Описание
CVE-2012-10025	WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
CVE-2014-9186	A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410....
CVE-2015-10133	Subscribe to Comments <= 2.1.2 - Local File Includion
CVE-2015-6461	Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNO...
CVE-2016-20064	WP Vault 0.8.6.6 Local File Inclusion via wpv-image Parameter
CVE-2016-20077	WordPress Plugin Photocart Link 1.6 Local File Inclusion via decode.php
CVE-2016-20078	WordPress IMDb Profile Widget 1.0.8 Local File Inclusion via pic.php
CVE-2016-20079	WordPress Dharma Booking 2.28.3 Local File Inclusion via proccess.php
CVE-2016-20080	WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php
CVE-2016-20082	WordPress Plugin Abtest Local File Inclusion via abtest_admin.php
CVE-2016-6565	The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file
CVE-2017-14095	A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform...
CVE-2018-25231	HeidiSQL 9.5.0.5196 Denial of Service via Preferences
CVE-2018-25324	Simple Fields 0.2-0.3.5 Local File Inclusion via wp_abspath
CVE-2018-25329	WordPress Plugin WP with Spritz 1.0 Remote File Inclusion
CVE-2019-25760	Joomla! Component Easy Shop 1.2.3 Local File Inclusion
CVE-2019-5479	An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (Ja...
CVE-2020-13175	The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April...
CVE-2020-37169	WordPress Plugin ultimate-member 2.1.3 Local File Inclusion
CVE-2020-37246	WordPress Plugin Supsystic Backup 2.3.9 Local File Inclusion
CVE-2020-5295	Local File read vulnerability in OctoberCMS
CVE-2021-21804	A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20....
CVE-2021-22968	A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concret...
CVE-2021-29113	Remote file inclusion vulnerability in ArcGIS Server help documentation
CVE-2021-47734	CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution
CVE-2021-47900	Gila CMS < 2.0.0 - Remote Code Execution
CVE-2021-47978	ProcessMaker 3.5.4 Local File Inclusion via Path Traversal
CVE-2022-4446	PHP Remote File Inclusion in tsolucio/corebos
CVE-2022-4606	PHP Remote File Inclusion in flatpressblog/flatpress
CVE-2022-4982	DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI
CVE-2022-50897	mPDF 7.0 - Local File Inclusion
CVE-2022-50954	WordPress Plugin cab-fare-calculator 1.0.3 Local File Inclusion
CVE-2023-2249	wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization...
CVE-2023-2551	PHP Remote File Inclusion in unilogies/bumsys
CVE-2023-25995	WordPress AI Mortgage Calculator <= 1.0.1 - Local File Inclusion Vulnerability
CVE-2023-25998	WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Local File Inclusion Vulnerability
CVE-2023-25999	WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability
CVE-2023-26005	WordPress Fitrush <= 1.3.4 - Local File Inclusion Vulnerability
CVE-2023-3452	Canto <= 3.0.4 - Unauthenticated Remote File Inclusion
CVE-2023-4195	PHP Remote File Inclusion in cockpit-hq/cockpit
CVE-2023-4488	Dropbox Folder Share <= 1.9.7 - Unauthenticated Local File Inclusion
CVE-2023-49084	Local File Inclusion (RCE) in Cacti
CVE-2023-5099	HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2023-5199	PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode
CVE-2023-5250	Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode
CVE-2023-5815	News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
CVE-2023-6583	Import and export users and customers <= 1.24.2 - Authenticated(Administrator+) Directory Traversal via Recurring Import Func...
CVE-2023-6989	Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 18.5.9 - Unauthenticated Local File Inclusion
CVE-2024-0315	Remote file inclusion vulnerability in FireEye Central Management
CVE-2024-10436	WPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion
CVE-2024-10571	Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
CVE-2024-10871	Category Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion
CVE-2024-10873	LA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-10898	Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-11289	Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
CVE-2024-11429	Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contr...
CVE-2024-12040	Product Carousel Slider & Grid Ultimate for WooCommerce <= 1.9.10 - Authenticated (Contributor+) Local File Inclusion via 'th...
CVE-2024-12209	WP Umbrella: Update Backup Restore & Monitoring <= 2.17.0 - Unauthenticated Local File Inclusion
CVE-2024-12272	WP Travel Engine – Elementor Widgets \| Create Travel Booking Website Using WordPress and Elementor <= 1.3.7 - Authenticated (...
CVE-2024-12563	s2Member Pro <= 250214 - Authenticated (Contributor+) Local File Inclusion to Remote Code Execution via Shortcode
CVE-2024-12571	Store Locator <= 3.98.10 - Unauthenticated Local File Inclusion
CVE-2024-12811	Traveler <= 3.1.9 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-12859	BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-13353	Responsive Addons for Elementor – Free Elementor Addons Plugin and Elementor Templates <= 1.6.4 - Authenticated (Contributor+...
CVE-2024-13408	Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contrib...
CVE-2024-13592	Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-13593	BMLT Meeting Map <= 2.6.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-13790	MinimogWP – The High Converting eCommerce WordPress Theme <= 3.7.0 - Unauthenticated Local PHP File Inclusion
CVE-2024-1382	Restaurant Reservations <= 1.9 - Directory Traversal to Authenticated (Contributor+) Local File Inclusion
CVE-2024-14002	Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis
CVE-2024-1600	Local File Inclusion in parisneo/lollms-webui
CVE-2024-2047	ElementsKit Elementor addons <= 3.0.6 - Authenticated (Contributor+) Local File Inclusion in render_raw
CVE-2024-2411	MasterStudy LMS <= 3.3.0 - Unauthenticated Local File Inclusion via modal
CVE-2024-27971	WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.10 - Local File Inclusion vulnerability
CVE-2024-3061	HUSKY – Products Filter Professional for WooCommerce <= 1.3.5.2 - Authenticated (Admin+) Local File Inclusion
CVE-2024-3136	MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template
CVE-2024-31459	Cacti RCE vulnerability by file include in lib/plugin.php
CVE-2024-32523	WordPress Mailster plugin <= 4.0.6 - Unauthenticated Local File Inclusion vulnerability
CVE-2024-3499	ElementsKit Elementor addons <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Onepage Scroll Module
CVE-2024-3500	ElementsKit Pro <= 3.6.0 - Authenticated (Contributor+) Local File Inclusion via Price Menu, Hotspot, and Advanced Toggle Wid...
CVE-2024-3551	Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion
CVE-2024-35629	WordPress Easy Digital Downloads – Recent Purchases plugin <= 1.0.2 - Remote File Inclusion vulnerability
CVE-2024-3564	Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-35650	WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability
CVE-2024-36415	SuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content lea...
CVE-2024-37410	WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability
CVE-2024-37520	WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 2.1.12 - Local File Inclusion vulnerability
CVE-2024-3806	Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts
CVE-2024-3807	Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta
CVE-2024-3808	Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-3809	Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta
CVE-2024-3810	Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-3812	Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-3813	tagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2024-3849	Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-38735	WordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability
CVE-2024-41925	Optigo Networks ONS-S8 Spectra Aggregation Switch PHP Remote File Inclusion
CVE-2024-4258	Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion
CVE-2024-4315	LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms
CVE-2024-43261	WordPress Compute Links plugin <= 1.2.1 - Remote File Inclusion vulnerability
CVE-2024-4359	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authentica...
CVE-2024-44023	WordPress ABCApp Creator plugin <= 1.1.2 - Local File Inclusion vulnerability
CVE-2024-44048	WordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulne...
CVE-2024-4441	XML Sitemap & Google News <= 5.4.8 - Unauthenticated Local File Inclusion
CVE-2024-45077	IBM Maximo Asset Management file upload
CVE-2024-4551	Video Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Authenticated (Contributor+) Arbitrary File Inclusion...
CVE-2024-4670	All-in-One Video Gallery <= 3.6.5 - Authenticated (Contributor+) Local File Inclusion via aiovg_search_form Shortcode
CVE-2024-47323	WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability
CVE-2024-48029	WordPress SB Random Posts Widget plugin <= 1.0 - Local File Inclusion vulnerability
CVE-2024-4887	Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-49243	WordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2024-49251	WordPress Maan Addons For Elementor plugin <= 1.0.1 - Local File Inclusion vulnerability
CVE-2024-49317	WordPress Point Maker plugin <= 0.1.4 - Local File Inclusion vulnerability
CVE-2024-4936	Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
CVE-2024-49649	WordPress Build App Online plugin <= 1.0.23 - Local File Inclusion vulnerability
CVE-2024-49690	WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability
CVE-2024-49701	WordPress Mags theme <= 1.1.6 - Local File Inclusion vulnerability
CVE-2024-50434	WordPress NewsCard theme <= 1.3 - Local File Inclusion vulnerability
CVE-2024-50435	WordPress Meta News theme <= 1.1.7 - Local File Inclusion vulnerability
CVE-2024-50436	WordPress Clean Retina theme <= 3.0.6 - Local File Inclusion vulnerability
CVE-2024-50457	WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability
CVE-2024-8252	Clean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-50497	WordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability
CVE-2024-51541	Local File Inclusion
CVE-2024-52381	WordPress ZIJ KART plugin <= 1.1 - Local File Inclusion vulnerability
CVE-2024-52385	WordPress Team Member – Multi Language Supported Team plugin <= 7.4 - Limited Local File Inclusion vulnerability
CVE-2024-52386	WordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability
CVE-2024-52501	WordPress Office Locator plugin <= 1.3.0 - Local File Inclusion vulnerability
CVE-2024-5345	Responsive Owl Carousel for Elementor <= 1.2.0 - Local File Inclusion
CVE-2024-5348	Elements For Elementor <= 2.1 - Authenticated (Contributor+) Local File Inclusion via Multiple Widget Attributes
CVE-2024-53739	WordPress Cryptocurrency Widgets For Elementor plugin <= 1.6.4 - Local File Inclusion vulnerability
CVE-2024-53800	WordPress Rezgo Online Booking plugin <= 4.17 - Local File Inclusion vulnerability
CVE-2024-53824	WordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerability
CVE-2024-54225	WordPress Designer plugin <= 1.4.1 - Local File Inclusion vulnerability
CVE-2024-54263	WordPress Spirit Framework plugin <= 1.2.13 - Local File Inclusion vulnerability
CVE-2024-54270	WordPress Axeptio plugin <= 2.5.4 - Local File Inclusion vulnerability
CVE-2024-5431	WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contrib...
CVE-2024-5503	WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion
CVE-2024-8392	WordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion
CVE-2024-8393	Woocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion
CVE-2024-9193	WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update
CVE-2024-9981	FormosaSoft ee-class - Local File Inclusion
CVE-2025-0366	Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
CVE-2025-11023	Local File Inclusion in ArkSigner's AcBakImzala
CVE-2025-11704	Elegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-11722	Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-11920	WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2025-12497	Premium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]
CVE-2025-12549	WordPress Rozy - Flower Shop theme <= 1.2.25 - Local File Inclusion vulnerability
CVE-2025-12550	WordPress OchaHouse theme <= 2.2.8 - Local File Inclusion vulnerability
CVE-2025-12851	My auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller
CVE-2025-13088	Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-13641	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion...
CVE-2025-13886	LT Unleashed <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion via 'template' Parameter
CVE-2025-14359	WordPress Oshine theme < 7.3.0 - Local File Inclusion vulnerability
CVE-2025-14429	WordPress AeroLand theme <= 1.6.6 - Local File Inclusion vulnerability
CVE-2025-14430	WordPress Brook - Agency Business Creative theme <= 2.9.0 - Local File Inclusion vulnerability
CVE-2025-14431	WordPress Navian theme <= 1.5.4 - Local File Inclusion vulnerability
CVE-2025-4380	Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion
CVE-2025-14475	Extensive VC Addons for WPBakery page builder <= 1.9.1 - Unauthenticated Local File Inclusion via 'shortcode_name' Parameter
CVE-2025-14502	News and Blog Designer Bundle <= 1.1 - Unauthenticated Local File Inclusion
CVE-2025-15368	SportsPress <= 2.7.26 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2025-1771	Traveler <= 3.1.8 - Unauthenticated Local File Inclusion via hotel_alone_load_more_post
CVE-2025-2101	Edumall <= 4.2.4 - Unauthenticated Local File Inclusion
CVE-2025-22145	Carbon has an arbitrary file include via unvalidated input passed to Carbon::setLocale
CVE-2025-22279	WordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerability
CVE-2025-22305	WordPress Hero Banner Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability
CVE-2025-22311	WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability
CVE-2025-22364	WordPress Ach Invoice App plugin <= 1.0.1 - Local File Inclusion vulnerability
CVE-2025-22656	WordPress Cookie Monster Plugin <= 1.2.2 - Local File Inclusion vulnerability
CVE-2025-22707	WordPress Moody theme <= 2.7.3 - Local File Inclusion vulnerability
CVE-2025-22708	WordPress Mitech theme <= 2.3.4 - Local File Inclusion vulnerability
CVE-2025-22712	WordPress Typify theme <= 3.0.2 - Local File Inclusion vulnerability
CVE-2025-31632	WordPress La Boom <= 2.7 - Local File Inclusion Vulnerability
CVE-2025-31633	WordPress Kiamo - Responsive Business Service WordPress Theme <= 1.3.3 - Local File Inclusion Vulnerability
CVE-2025-32141	WordPress MasterStudy LMS plugin <= 3.5.28 - Local File Inclusion vulnerability
CVE-2025-32142	WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
CVE-2025-32146	WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
CVE-2025-32150	WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability
CVE-2025-32151	WordPress BuddyForms Plugin <= 2.9.0 - Local File Inclusion vulnerability
CVE-2025-32152	WordPress Slider a SlidersPack Plugin <= 2.3 - Local File Inclusion vulnerability
CVE-2025-32153	WordPress VG WooCarousel plugin <= 1.3 - Local File Inclusion vulnerability
CVE-2025-32154	WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2025-32155	WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability
CVE-2025-32156	WordPress Just Post Preview Widget plugin <= 1.1.1 - Local File Inclusion vulnerability
CVE-2025-32157	WordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-32158	WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability
CVE-2025-32159	WordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability
CVE-2025-32160	WordPress EventON plugin <= 2.4.1 - Local File Inclusion vulnerability
CVE-2025-32672	WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability
CVE-2025-32692	WordPress WP Subscription Forms plugin <= 1.2.4 - Local File Inclusion Vulnerability
CVE-2025-32921	WordPress Arrival theme <= 1.4.5 - Local File Inclusion vulnerability
CVE-2025-32925	WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability
CVE-2025-3703	WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability
CVE-2025-39359	WordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2025-39360	WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability
CVE-2025-39364	WordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerability
CVE-2025-39378	WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnera...
CVE-2025-39379	WordPress Capturly plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2025-39383	WordPress Xews Lite plugin <= 1.0.9 - Local File Inclusion vulnerability
CVE-2025-39384	WordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-39387	WordPress Opstore theme <= 1.4.5 - Local File Inclusion vulnerability
CVE-2025-39391	WordPress Checkout Field Visibility for WooCommerce plugin <= 1.3.0 - Local File Inclusion vulnerability
CVE-2025-39396	WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability
CVE-2025-39399	WordPress License For Envato plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2025-39406	WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability
CVE-2025-39411	WordPress WhatsApp Click to Chat Plugin for WordPress plugin <= 2.2.12 - Local File Inclusion vulnerability
CVE-2025-0632	Local File Inclusion (LFI) leading to sensitive data exposure
CVE-2025-0682	ThemeREX Addons <= 2.33.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
CVE-2025-10143	Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-10269	Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion
CVE-2025-22508	WordPress FAT Event Lite plugin <= 1.1 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability
CVE-2025-22509	WordPress Atlas theme <= 2.1.0 - Local File Inclusion vulnerability
CVE-2025-23915	WordPress FAT Event Lite plugin <= 1.1 - Authenticated Non-Arbitrary Local File Inclusion vulnerability
CVE-2025-23937	WordPress LinkedIn Lite Plugin <= 1.0 - Local File Inclusion vulnerability
CVE-2025-23938	WordPress Image Gallery Box by CRUDLab Plugin <= 1.0.3 - Local File Inclusion vulnerability
CVE-2025-23945	WordPress Popliup Plugin <= 1.1.1 - Local File Inclusion vulnerability
CVE-2025-23948	WordPress Background animation blocks Plugin <= 2.1.5 - Local File Inclusion vulnerability
CVE-2025-23949	WordPress Improved Sale Badges – Free Version Plugin <= 1.0.1 - Local File Inclusion vulnerability
CVE-2025-23952	WordPress Custom Field List Widget Plugin <= 1.5.1 - Local File Inclusion vulnerability
CVE-2025-24766	WordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability
CVE-2025-24768	WordPress Nitan theme <= 2.9 - Local File Inclusion Vulnerability
CVE-2025-24769	WordPress Zenny theme <= 1.7.5 - Local File Inclusion Vulnerability
CVE-2025-24770	WordPress CraftXtore theme <= 1.7 - Local File Inclusion Vulnerability
CVE-2025-24782	WordPress Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin <= 1.6.10 - Local...
CVE-2025-26592	WordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability
CVE-2025-26889	WordPress hockeydata LOS plugin <= 1.2.4 - Local File Inclusion vulnerability
CVE-2025-26890	WordPress HUSKY plugin <= 1.3.6.4 - Local File Inclusion vulnerability
CVE-2025-26894	WordPress Coming Soon, Maintenance Mode plugin <= 1.1.1 - Local File Inclusion vulnerability
CVE-2025-26909	WordPress Hide My WP Ghost plugin <= 5.4.01 - Local File Inclusion to RCE vulnerability
CVE-2025-26916	WordPress Massive Dynamic theme <= 8.2 - Unauthenticated Local File Inclusion vulnerability
CVE-2025-27264	WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2025-27272	WordPress VG PostCarousel plugin <= 1.1 - Local File Inclusion vulnerability
CVE-2025-27362	WordPress Petito theme < 1.6.6 - Local File Inclusion vulnerability
CVE-2025-28888	WordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability
CVE-2025-28916	WordPress Docpro plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2025-30635	WordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability
CVE-2025-30782	WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion vulnerability
CVE-2025-30785	WordPress Subscribe to Download Lite plugin <= 1.2.9 - Local File Inclusion Vulnerability
CVE-2025-30901	WordPress JS Help Desk plugin <= 2.9.2 - Local File Inclusion vulnerability
CVE-2025-30992	WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability
CVE-2025-30999	WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability
CVE-2025-31014	WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability
CVE-2025-31015	WordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability
CVE-2025-31016	WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability
CVE-2025-31030	WordPress Ray Enterprise Translation plugin <= 1.7.0 - Local File Inclusion via CSRF Vulnerability
CVE-2025-31040	WordPress WP Food ordering and Restaurant Menu plugin <= 2.7 - Local File Inclusion vulnerability
CVE-2025-31060	WordPress Capie theme <= 1.0.40 - Local File Inclusion Vulnerability
CVE-2025-31064	WordPress Vizeon theme < 1.2.1 - Local File Inclusion vulnerability
CVE-2025-31082	WordPress News & Blog Designer Pack plugin <= 4.0 - Local File Inclusion vulnerability
CVE-2025-31097	WordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability
CVE-2025-31098	WordPress DeBounce Email Validator plugin <= 5.7 - Local File Inclusion Vulnerability
CVE-2025-31432	WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability
CVE-2025-31912	WordPress Enzio - Responsive Business WordPress Theme theme < 1.2.6 - Local File Inclusion vulnerability
CVE-2025-31913	WordPress Ogami theme <= 1.53 - Local File Inclusion Vulnerability
CVE-2025-32286	WordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability
CVE-2025-32288	WordPress RT-Theme 18 \| Extensions plugin <= 2.4 - Local File Inclusion Vulnerability
CVE-2025-32289	WordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability
CVE-2025-32294	WordPress Oxpitan theme <= 1.3.5 - Local File Inclusion Vulnerability
CVE-2025-32298	WordPress CTUsers plugin <= 1.0.0 - Local File Inclusion Vulnerability
CVE-2025-32302	WordPress Winnex theme <= 1.3.2 - Local File Inclusion Vulnerability
CVE-2025-32304	WordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability
CVE-2025-32309	WordPress Healsoul theme <= 2.2.3 - Local File Inclusion Vulnerability
CVE-2025-32499	WordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability
CVE-2025-32519	WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability
CVE-2025-32549	WordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability
CVE-2025-32577	WordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability
CVE-2025-32589	WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability
CVE-2025-32595	WordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability
CVE-2025-32614	WordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability
CVE-2025-32627	WordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability
CVE-2024-52428	WordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability
CVE-2024-52450	WordPress nBlocks plugin <= 1.0.2 - Local File Inclusion vulnerability
CVE-2024-52496	WordPress Absolute Addons For Elementor plugin <= 1.0.14 - Local File Inclusion vulnerability
CVE-2024-52497	WordPress Shopready plugin <= 3.6 - Local File Inclusion vulnerability
CVE-2024-52499	WordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2024-54376	WordPress EazyDocs plugin <= 2.8.0 - Local File Inclusion vulnerability
CVE-2024-5455	The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (C...
CVE-2024-5574	WP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-5577	Where I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion
CVE-2024-56216	WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability
CVE-2024-56230	WordPress Dynamic Product Category Grid, Slider for WooCommerce plugin <= 1.1.3 - Local File Inclusion vulnerability
CVE-2024-56281	WordPress 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin <= 5.2.0 - Local File Inclusion vulnerability
CVE-2024-56282	WordPress WPMozo Addons Lite for Elementor plugin <= 1.1.0 - Local File Inclusion vulnerability
CVE-2024-5762	Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability
CVE-2024-58302	FoF Pretty Mail 1.1.2 Local File Inclusion via Email Template Settings
CVE-2024-6589	LearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-1707	Review Schema <= 2.2.4 - Authenticated (Contributor+) Local File Inclusion via Post Meta
CVE-2025-24690	WordPress Formality Plugin <= 1.5.7 - Local File Inclusion vulnerability
CVE-2025-24733	WordPress Post Grid Master plugin <= 3.4.12 - Local File Inclusion vulnerability
CVE-2025-24760	WordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability
CVE-2025-24761	WordPress DSK theme < 2.4 - Local File Inclusion vulnerability
CVE-2025-25109	WordPress Vehicle Manager plugin <= 3.1 - Local File Inclusion vulnerability
CVE-2025-25141	WordPress Fami Sales Popup plugin <= 2.0.0 - Local File Inclusion vulnerability
CVE-2025-25172	WordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability
CVE-2025-25174	WordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability
CVE-2025-26735	WordPress Grip theme <= 1.0.9 - Local File Inclusion vulnerability
CVE-2025-26757	WordPress FULL – Cliente plugin <= 3.1.26 - Local File Inclusion vulnerability
CVE-2025-26760	WordPress Calculator Builder plugin <= 1.6.2 - Local File Inclusion vulnerability
CVE-2025-26932	WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability
CVE-2025-26933	WordPress Place Order Without Payment for WooCommerce plugin <= 2.6.7 - Local File Inclusion vulnerability
CVE-2025-26957	WordPress Affiliate Coupons plugin <= 1.7.3 - Local File Inclusion vulnerability
CVE-2025-26964	WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability
CVE-2025-26979	WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability
CVE-2025-26985	WordPress Majestic Support plugin <= 1.0.6 - Local File Inclusion vulnerability
CVE-2025-26986	WordPress Pearl Theme < 3.4.8 - Local File Inclusion vulnerability
CVE-2025-27011	WordPress Booking and Rental Manager plugin <= 2.2.8 - Local File Inclusion vulnerability
CVE-2025-27015	WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability
CVE-2025-28944	WordPress Avaz theme <= 2.8 - Local File Inclusion Vulnerability
CVE-2025-28945	WordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability
CVE-2025-28946	WordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability
CVE-2025-28947	WordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability
CVE-2025-28979	WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability
CVE-2025-28990	WordPress SNS Vicky theme <= 3.7 - Local File Inclusion Vulnerability
CVE-2025-28991	WordPress Evon theme <= 3.4 - Local File Inclusion Vulnerability
CVE-2025-28992	WordPress SNS Anton theme <= 4.1 - Local File Inclusion Vulnerability
CVE-2025-28998	WordPress SERPed.net plugin <= 4.6 - Local File Inclusion Vulnerability
CVE-2025-29002	WordPress Simen theme <= 4.6 - Local File Inclusion Vulnerability
CVE-2025-30814	WordPress The Post Grid plugin <= 7.7.17 - Local File Inclusion vulnerability
CVE-2025-30820	WordPress WishSuite plugin <= 1.4.4 - Local File Inclusion Vulnerability
CVE-2025-30829	WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability
CVE-2025-30831	WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability
CVE-2025-30835	WordPress Accounting for WooCommerce plugin <= 1.6.8 - Local File Inclusion vulnerability
CVE-2025-30845	WordPress The Pack Elementor addons plugin <= 2.1.1 - Local File Inclusion vulnerability
CVE-2025-30846	WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability
CVE-2025-30849	WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability
CVE-2025-30868	WordPress Team Manager plugin <= 2.1.23 - Local File Inclusion Vulnerability
CVE-2025-30870	WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
CVE-2025-30871	WordPress WP Travel Engine plugin <= 6.3.5 - Local File Inclusion vulnerability
CVE-2025-30890	WordPress Login Widget for Ultimate Member plugin <= 1.1.2 - Local File Inclusion vulnerability
CVE-2025-30891	WordPress WpTravelly Plugin <= 1.8.7 - Local File Inclusion vulnerability
CVE-2025-31340	Wisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-31387	WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability
CVE-2025-31405	WordPress Fami WooCommerce Compare plugin <= 1.0.5 - Local File Inclusion vulnerability
CVE-2025-39570	WordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability
CVE-2025-39584	WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
CVE-2025-39592	WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion Vulnerability
CVE-2025-41734	Unauthenticated Local File Inclusion in php module
CVE-2025-4200	Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion
CVE-2025-52806	WordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability
CVE-2025-52807	WordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability
CVE-2025-52808	WordPress RealtyElite theme <= 1.0.0 - Local File Inclusion Vulnerability
CVE-2025-52809	WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability
CVE-2025-52812	WordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability
CVE-2025-52814	WordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability
CVE-2025-52815	WordPress CityGov theme <= 1.9 - Local File Inclusion Vulnerability
CVE-2025-52816	WordPress Zita theme <= 1.6.5 - Local File Inclusion Vulnerability
CVE-2025-53198	WordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability
CVE-2025-53204	WordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability
CVE-2025-53207	WordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability
CVE-2025-53210	WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability
CVE-2025-53216	WordPress Glamer Theme <= 1.0.2 - Local File Inclusion Vulnerability
CVE-2025-53227	WordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability
CVE-2025-53244	WordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability
CVE-2025-53247	WordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability
CVE-2025-53248	WordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability
CVE-2025-53252	WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability
CVE-2025-53257	WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability
CVE-2025-53259	WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability
CVE-2025-53281	WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability
CVE-2025-53326	WordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability
CVE-2025-53328	WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability
CVE-2025-53334	WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability
CVE-2025-53335	WordPress Berger theme <= 1.1.1 - Local File Inclusion vulnerability
CVE-2025-53339	WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Local File Inclusion Vulnerability
CVE-2025-53429	WordPress Exit Game theme <= 1.4.3 - Local File Inclusion vulnerability
CVE-2025-53430	WordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerability
CVE-2025-53431	WordPress Emberlyn theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2025-53432	WordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability
CVE-2025-53433	WordPress EasyEat theme <= 1.9.0 - Local File Inclusion vulnerability
CVE-2025-53434	WordPress ChildHope theme <= 1.1.8 - Local File Inclusion vulnerability
CVE-2025-53435	WordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability
CVE-2025-53436	WordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability
CVE-2025-53437	WordPress Greenorganic theme <= 2.45 - Local File Inclusion vulnerability
CVE-2025-53438	WordPress FitLine theme <= 1.6 - Local File Inclusion vulnerability
CVE-2025-53439	WordPress Harper theme <= 1.13 - Local File Inclusion vulnerability
CVE-2025-53440	WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability
CVE-2025-53441	WordPress Greeny theme <= 2.6 - Local File Inclusion vulnerability
CVE-2025-53442	WordPress Rentic theme <= 1.1 - Local File Inclusion vulnerability
CVE-2025-53443	WordPress Smash theme <= 1.7 - Local File Inclusion vulnerability
CVE-2025-53445	WordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability
CVE-2025-53446	WordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability
CVE-2025-53447	WordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability
CVE-2025-53448	WordPress Rally theme <= 1.1 - Local File Inclusion vulnerability
CVE-2025-53449	WordPress Convex theme <= 1.11 - Local File Inclusion vulnerability
CVE-2025-53450	WordPress Easy Pricing Table WP Plugin <= 1.1.3 - Local File Inclusion Vulnerability
CVE-2025-53453	WordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-53565	WordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability
CVE-2025-53567	WordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability
CVE-2025-53576	WordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability
CVE-2025-53578	WordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability
CVE-2025-54003	WordPress Depot theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-54015	WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability
CVE-2025-54017	WordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability
CVE-2025-54028	WordPress CF7 WOW Styler Plugin <= 1.7.2 - Local File Inclusion Vulnerability
CVE-2025-54031	WordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability
CVE-2025-54034	WordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability
CVE-2025-54138	LibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE
CVE-2025-54689	WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability
CVE-2025-54690	WordPress Xinterio Theme <= 4.2 - Local File Inclusion Vulnerability
CVE-2025-54700	WordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability
CVE-2025-54701	WordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability
CVE-2025-54709	WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability
CVE-2025-54716	WordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability
CVE-2025-54750	WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability
CVE-2025-57889	WordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability
CVE-2025-57925	WordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability
CVE-2025-58024	WordPress Accordion FAQ Plugin <= 2.2.1 - Local File Inclusion Vulnerability
CVE-2025-5804	WordPress Case Theme User < 1.0.4 - Local File Inclusion Vulnerability
CVE-2025-58206	WordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability
CVE-2025-58214	WordPress Indutri Theme < 1.3.0 - Local File Inclusion Vulnerability
CVE-2025-58215	WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability
CVE-2025-58225	WordPress Paragon theme <= 1.1 - Local File Inclusion vulnerability
CVE-2025-58608	WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability
CVE-2025-58637	WordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability
CVE-2025-58705	WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability
CVE-2025-58706	WordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability
CVE-2025-39429	WordPress Széchenyi 2020 Logo <= 1.1 - Local File Inclusion vulnerability
CVE-2025-39452	WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability
CVE-2025-39458	WordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability
CVE-2025-39461	WordPress Docket Cache plugin <= 24.07.02 - Local File Inclusion vulnerability
CVE-2025-39462	WordPress Smart Agreements plugin <= 1.0.3 - Local File Inclusion vulnerability
CVE-2025-39463	WordPress Dessau theme < 1.9 - Local File Inclusion vulnerability
CVE-2025-39466	WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability
CVE-2025-39468	WordPress Modal Survey plugin <= 2.0.2.0.1 - Local File Inclusion vulnerability
CVE-2025-39476	WordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability
CVE-2025-39490	WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability
CVE-2025-39494	WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability
CVE-2025-39506	WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability
CVE-2025-39507	WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability
CVE-2025-39526	WordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability
CVE-2025-46474	WordPress SEUR Oficial plugin <= 2.2.23 - Local File Inclusion Vulnerability
CVE-2025-48125	WordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability
CVE-2025-48126	WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability
CVE-2025-48136	WordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability
CVE-2025-48149	WordPress Cook&Meal <= 1.2.3 - Local File Inclusion Vulnerability
CVE-2025-48290	WordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability
CVE-2025-48292	WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability
CVE-2025-48293	WordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability
CVE-2025-48298	WordPress SEOPress for MainWP <= 1.4 - Local File Inclusion Vulnerability
CVE-2025-48302	WordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability
CVE-2025-48330	WordPress Real Time Validation for Gravity Forms <= 1.7.0 - Local File Inclusion Vulnerability
CVE-2025-48332	WordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability
CVE-2025-48338	WordPress WP Abstracts plugin <= 2.7.4 - Local File Inclusion vulnerability
CVE-2025-49251	WordPress Fana theme <= 1.1.28 - Local File Inclusion Vulnerability
CVE-2025-49252	WordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability
CVE-2025-49253	WordPress Lasa theme <= 1.1 - Local File Inclusion Vulnerability
CVE-2025-49254	WordPress Nika theme <= 1.2.8 - Local File Inclusion Vulnerability
CVE-2025-49255	WordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability
CVE-2025-49256	WordPress Sapa theme <= 1.1.14 - Local File Inclusion Vulnerability
CVE-2025-49257	WordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability
CVE-2025-49258	WordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability
CVE-2025-49259	WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability
CVE-2025-49260	WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability
CVE-2025-49261	WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability
CVE-2025-49264	WordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability
CVE-2025-49405	WordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability
CVE-2025-49416	WordPress FW Gallery plugin <= 8.0.0 - Local File Inclusion Vulnerability
CVE-2025-49426	WordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability
CVE-2025-49436	WordPress Anotte theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-49454	WordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability
CVE-2025-49508	WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability
CVE-2025-49883	WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability
CVE-2025-49886	WordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability
CVE-2025-49889	WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability
CVE-2025-49892	WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability
CVE-2025-49894	WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability
CVE-2025-49921	WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability
CVE-2025-49935	WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability
CVE-2025-49941	WordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability
CVE-2025-49942	WordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability
CVE-2025-49943	WordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability
CVE-2025-49994	WordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability
CVE-2025-50003	WordPress Amuli theme <= 2.3.0 - Local File Inclusion vulnerability
CVE-2025-52562	Convey Panel Directory Traversal in LocaleController leading to Remote Code Execution
CVE-2025-52708	WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability
CVE-2025-52715	WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability
CVE-2025-52716	WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability
CVE-2025-52723	WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability
CVE-2025-52728	WordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability
CVE-2025-52729	WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability
CVE-2025-52732	WordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability
CVE-2025-52745	WordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability
CVE-2025-52768	WordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability
CVE-2025-58879	WordPress Festy theme <= 1.13.0 - Local File Inclusion vulnerability
CVE-2025-58885	WordPress Pathfinder theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-58888	WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability
CVE-2025-58889	WordPress Towny theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-58890	WordPress Playful theme <= 1.19.0 - Local File Inclusion vulnerability
CVE-2025-58891	WordPress Sanger theme <= 1.24.0 - Local File Inclusion vulnerability
CVE-2025-58892	WordPress Tourimo theme <= 1.2.3 - Local File Inclusion vulnerability
CVE-2025-58893	WordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability
CVE-2025-58894	WordPress Good Mood theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-58895	WordPress Integro theme <= 1.8.0 - Local File Inclusion vulnerability
CVE-2025-58896	WordPress Otaku theme <= 1.8.0 - Local File Inclusion vulnerability
CVE-2025-58897	WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability
CVE-2025-58898	WordPress HealthHub theme <= 1.3.0 - Local File Inclusion vulnerability
CVE-2025-58899	WordPress Frame theme <= 2.4.0 - Local File Inclusion vulnerability
CVE-2025-58900	WordPress UniTravel theme <= 1.4.2 - Local File Inclusion vulnerability
CVE-2025-58901	WordPress Takeout theme <= 1.3.0 - Local File Inclusion vulnerability
CVE-2025-58913	WordPress VideoPro theme <= 2.3.8.1 - Local File Inclusion vulnerability
CVE-2025-58923	WordPress Critique theme <= 1.17 - Local File Inclusion vulnerability
CVE-2025-58924	WordPress Geya theme <= 1.15 - Local File Inclusion vulnerability
CVE-2025-58925	WordPress Neptunus theme <= 1.0.11 - Local File Inclusion vulnerability
CVE-2025-58926	WordPress Cerebrum theme <= 1.12 - Local File Inclusion vulnerability
CVE-2025-58927	WordPress Stallion theme <= 1.17 - Local File Inclusion vulnerability
CVE-2025-58928	WordPress Heart theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-58929	WordPress Pantry theme <= 1.4 - Local File Inclusion vulnerability
CVE-2025-58930	WordPress FitFlex theme <= 1.6 - Local File Inclusion vulnerability
CVE-2025-58931	WordPress Palatio theme <= 1.6 - Local File Inclusion vulnerability
CVE-2025-58932	WordPress Prisma theme <= 1.10 - Local File Inclusion vulnerability
CVE-2025-58933	WordPress Anubis theme <= 1.25 - Local File Inclusion vulnerability
CVE-2025-58934	WordPress The Gig theme <= 1.18.0 - Local File Inclusion vulnerability
CVE-2025-58935	WordPress Lunna theme <= 1.15 - Local File Inclusion vulnerability
CVE-2025-58936	WordPress Catamaran theme <= 1.15 - Local File Inclusion vulnerability
CVE-2025-58937	WordPress Tacticool theme <= 1.0.13 - Local File Inclusion vulnerability
CVE-2025-58940	WordPress Basil theme <= 1.3.12 - Local File Inclusion vulnerability
CVE-2025-58941	WordPress Fabric theme <= 1.5.0 - Local File Inclusion vulnerability
CVE-2025-58942	WordPress Dwell theme <= 1.7.0 - Local File Inclusion vulnerability
CVE-2025-58943	WordPress Agricola theme <= 1.1.0 - Local File Inclusion vulnerability
CVE-2025-58944	WordPress Manufactory theme <= 1.4 - Local File Inclusion vulnerability
CVE-2025-58945	WordPress EcoGrow theme <= 1.7 - Local File Inclusion vulnerability
CVE-2025-58946	WordPress Vocal theme <= 1.12 - Local File Inclusion vulnerability
CVE-2025-58947	WordPress Athos theme <= 1.9 - Local File Inclusion vulnerability
CVE-2025-58948	WordPress Aromatica theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-58949	WordPress Spock theme <= 1.17 - Local File Inclusion vulnerability
CVE-2025-58950	WordPress Lione theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-32654	WordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability
CVE-2025-32656	WordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability
CVE-2025-32657	WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability
CVE-2025-32663	WordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability
CVE-2025-32668	WordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability
CVE-2025-4414	WordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability
CVE-2025-46230	WordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability
CVE-2025-46444	WordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability
CVE-2025-46454	WordPress Meta Keywords & Description plugin <= 0.8 - Local File Inclusion Vulnerability
CVE-2025-46468	WordPress Fable Extra plugin <= 1.0.6 - Local File Inclusion Vulnerability
CVE-2025-4689	Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Ex...
CVE-2025-47438	WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability
CVE-2025-47439	WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability
CVE-2025-47440	WordPress WPAdverts plugin <= 2.2.2 - Local File Inclusion Vulnerability
CVE-2025-47453	WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability
CVE-2025-47474	WordPress Anarkali theme <= 1.0.9 - Local File Inclusion vulnerability
CVE-2025-47494	WordPress EventON plugin <= 2.4.1 - Local File Inclusion Vulnerability
CVE-2025-47496	WordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability
CVE-2025-47498	WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability
CVE-2025-47508	WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability
CVE-2025-47510	WordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability
CVE-2025-47531	WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability
CVE-2025-47571	WordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability
CVE-2025-47572	WordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability
CVE-2025-47576	WordPress Bimber - Viral Magazine WordPress Theme theme <= 9.2.5 - Local File Inclusion vulnerability
CVE-2025-47586	WordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability
CVE-2025-47627	WordPress PrivateContent - Mail Actions plugin <= 2.3.2 - Local File Inclusion vulnerability
CVE-2025-47653	WordPress WP-Recall <= 16.26.14 - Local File Inclusion Vulnerability
CVE-2025-47670	WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability
CVE-2025-47672	WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability
CVE-2025-47693	WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability
CVE-2025-47695	WordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability
CVE-2025-47696	WordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability
CVE-2025-48157	WordPress Formality <= 1.5.9 - Local File Inclusion Vulnerability
CVE-2025-48160	WordPress Caliris <= 1.5 - Local File Inclusion Vulnerability
CVE-2025-48171	WordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability
CVE-2025-49036	WordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability
CVE-2025-49070	WordPress Elessi < 6.4.1 - Local File Inclusion Vulnerability
CVE-2025-49271	WordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability
CVE-2025-49275	WordPress Blogbyte theme <= 1.1.1 - Local File Inclusion Vulnerability
CVE-2025-49276	WordPress Blogmine theme <= 1.1.7 - Local File Inclusion Vulnerability
CVE-2025-49277	WordPress Blogprise theme <= 1.0.9 - Local File Inclusion Vulnerability
CVE-2025-49278	WordPress Blogty theme <= 1.0.11 - Local File Inclusion Vulnerability
CVE-2025-49279	WordPress Blogvy theme <= 1.0.7 - Local File Inclusion Vulnerability
CVE-2025-49280	WordPress Magty theme <= 1.0.6 - Local File Inclusion Vulnerability
CVE-2025-49281	WordPress Magways theme <= 1.2.1 - Local File Inclusion Vulnerability
CVE-2025-49282	WordPress Magze theme <= 1.0.9 - Local File Inclusion Vulnerability
CVE-2025-49307	WordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability
CVE-2025-49308	WordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability
CVE-2025-49313	WordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability
CVE-2025-49359	WordPress ShieldGroup theme <= 2.13 - Local File Inclusion vulnerability
CVE-2025-49360	WordPress Militarology theme <= 1.0.15 - Local File Inclusion vulnerability
CVE-2025-49361	WordPress Mamita theme <= 1.0.9 - Local File Inclusion vulnerability
CVE-2025-49362	WordPress Gracioza theme <= 1.0.15 - Local File Inclusion vulnerability
CVE-2025-49363	WordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability
CVE-2025-49364	WordPress Ludos Paradise theme <= 2.1.3 - Local File Inclusion vulnerability
CVE-2025-49365	WordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability
CVE-2025-49366	WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability
CVE-2025-49367	WordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability
CVE-2025-49368	WordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability
CVE-2025-59550	WordPress Xcare theme < 6.5 - Local File Inclusion vulnerability
CVE-2025-58952	WordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerability
CVE-2025-58953	WordPress Joly theme <= 1.22.0 - Local File Inclusion vulnerability
CVE-2025-58954	WordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability
CVE-2025-58955	WordPress Karzo theme < 2.6 - Local File Inclusion vulnerability
CVE-2025-58958	WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability
CVE-2025-58967	WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability
CVE-2025-58973	WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability
CVE-2025-58994	WordPress Greenify theme <= 2.2 - Local File Inclusion vulnerability
CVE-2025-58995	WordPress Leblix Theme <= 2.4 - Local File Inclusion Vulnerability
CVE-2025-59588	WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability
CVE-2025-60042	WordPress Chinchilla theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-60043	WordPress Wanderic theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2025-60044	WordPress Fribbo theme <= 1.1.0 - Local File Inclusion vulnerability
CVE-2025-60046	WordPress HeartStar theme <= 1.0.14 - Local File Inclusion vulnerability
CVE-2025-60047	WordPress IPharm theme <= 1.2.3 - Local File Inclusion vulnerability
CVE-2025-60048	WordPress Tripster theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2025-60049	WordPress Soleil theme <= 1.17 - Local File Inclusion vulnerability
CVE-2025-60050	WordPress Panda theme <= 1.21 - Local File Inclusion vulnerability
CVE-2025-60051	WordPress Rare Radio theme <= 1.0.15.1 - Local File Inclusion vulnerability
CVE-2025-60052	WordPress W&D theme <= 1.0 - Local File Inclusion vulnerability
CVE-2025-60053	WordPress MaxCube theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2025-60054	WordPress OnLeash theme <= 1.5.2 - Local File Inclusion vulnerability
CVE-2025-60055	WordPress Fabrica theme <= 1.8.1 - Local File Inclusion vulnerability
CVE-2025-60056	WordPress Winger theme <= 1.0.16 - Local File Inclusion vulnerability
CVE-2025-60057	WordPress DJ Rainflow theme <= 1.3.13 - Local File Inclusion vulnerability
CVE-2025-60058	WordPress DetailX theme <= 1.10.0 - Local File Inclusion vulnerability
CVE-2025-60059	WordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability
CVE-2025-60060	WordPress Pubzinne theme <= 1.0.12 - Local File Inclusion vulnerability
CVE-2025-60061	WordPress Kicker theme <= 2.2.0 - Local File Inclusion vulnerability
CVE-2025-60063	WordPress Rosalinda theme <= 1.2.3 - Local File Inclusion vulnerability
CVE-2025-60064	WordPress Renewal theme <= 1.2.2 - Local File Inclusion vulnerability
CVE-2025-60065	WordPress Pinevale theme <= 1.0.14 - Local File Inclusion vulnerability
CVE-2025-60066	WordPress Katelyn theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2025-60067	WordPress Giardino theme <= 1.1.10 - Local File Inclusion vulnerability
CVE-2025-60069	WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability
CVE-2025-60071	WordPress Riode \| Multi-Purpose WooCommerce theme <= 1.6.23 - Local File Inclusion vulnerability
CVE-2025-60072	WordPress Anchor smooth scroll plugin <= 1.0.2 - Local File Inclusion vulnerability
CVE-2025-60073	WordPress Responsive Sidebar plugin <= 1.2.2 - Local File Inclusion vulnerability
CVE-2025-60074	WordPress Lazy Load Optimizer plugin <= 1.4.7 - Local File Inclusion vulnerability
CVE-2025-60076	WordPress Ray Enterprise Translation plugin <= 1.7.1 - Local File Inclusion vulnerability
CVE-2025-60078	WordPress Task Manager plugin <= 3.0.2 - Local File Inclusion vulnerability
CVE-2025-60085	WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerability
CVE-2025-60087	WordPress Extensive VC Addons for WPBakery page builder plugin <= 1.9.1 - Local File Inclusion vulnerability
CVE-2025-60126	WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability
CVE-2025-60150	WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-60153	WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability
CVE-2025-60189	WordPress PoloPag – Pix Automático para Woocommerce plugin <= 2.0.9 - Local File Inclusion vulnerability
CVE-2025-60190	WordPress Immocaster WordPress Plugin plugin <= 1.3.6 - Local File Inclusion vulnerability
CVE-2025-60191	WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability
CVE-2025-60192	WordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability
CVE-2025-60193	WordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerability
CVE-2025-60194	WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability
CVE-2025-60196	WordPress Clearblue® Ovulation Calculator plugin <= 1.2.4 - Local File Inclusion vulnerability
CVE-2025-60197	WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability
CVE-2025-60198	WordPress Saxon - Viral Content Blog & Magazine Marketing WordPress Theme theme <= 1.9.3 - Local File Inclusion vulnerability
CVE-2025-60199	WordPress InHype - Blog & Magazine WordPress Theme theme <= 1.5.2 - Local File Inclusion vulnerability
CVE-2025-60200	WordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability
CVE-2025-60201	WordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability
CVE-2025-60202	WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability
CVE-2025-60203	WordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability
CVE-2025-60204	WordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability
CVE-2025-60240	WordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability
CVE-2025-60241	WordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability
CVE-2025-60248	WordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability
CVE-2025-59555	WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability
CVE-2025-59558	WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability
CVE-2025-59564	WordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability
CVE-2025-62029	WordPress Grevo theme <= 2.4 - Local File Inclusion vulnerability
CVE-2025-62045	WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability
CVE-2025-62053	WordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability
CVE-2025-62054	WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability
CVE-2025-62055	WordPress Academist theme < 1.3 - Local File Inclusion vulnerability
CVE-2025-62066	WordPress Revolution theme < 2.5.8 - Local File Inclusion vulnerability
CVE-2025-62067	WordPress Savory theme <= 2.5 - Local File Inclusion vulnerability
CVE-2025-62075	WordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability
CVE-2025-62753	WordPress MAS Videos plugin <= 1.3.4 - Local File Inclusion vulnerability
CVE-2025-62868	WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability
CVE-2025-63003	WordPress North - Required Plugin plugin <= 1.4.2 - Local File Inclusion vulnerability
CVE-2025-63017	WordPress WerkStatt plugin plugin <= 1.6.6 - Local File Inclusion vulnerability
CVE-2025-63036	WordPress Ronneby Theme Core plugin <= 1.5.68 - Local File Inclusion vulnerability
CVE-2025-63062	WordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability
CVE-2025-63074	WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability
CVE-2025-63076	WordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability
CVE-2025-6326	WordPress Inset theme <= 1.18.0 - Local File Inclusion Vulnerability
CVE-2025-64193	WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability
CVE-2025-64195	WordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability
CVE-2025-64205	WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability
CVE-2025-62010	WordPress Famita theme <= 1.54 - Local File Inclusion vulnerability
CVE-2025-62014	WordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability
CVE-2025-64359	WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability
CVE-2025-64360	WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability
CVE-2025-64363	WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability
CVE-2025-64364	WordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability
CVE-2025-64373	WordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability
CVE-2025-64377	WordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability
CVE-2025-64714	PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
CVE-2025-66115	WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability
CVE-2025-6746	WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-67515	WordPress Wilmër theme < 3.5 - Local File Inclusion vulnerability
CVE-2025-67521	WordPress Select Core plugin < 2.6 - Local File Inclusion vulnerability
CVE-2025-67522	WordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability
CVE-2025-67523	WordPress Exhibz theme <= 3.0.9 - Local File Inclusion vulnerability
CVE-2025-67524	WordPress Jobmonster Elementor Addon plugin <= 1.1.4 - Local File Inclusion vulnerability
CVE-2025-67525	WordPress ekommart theme < 4.3.1 - Local File Inclusion vulnerability
CVE-2025-67526	WordPress Sailing theme < 4.4.6 - Local File Inclusion vulnerability
CVE-2025-67527	WordPress Digiqole theme < 2.2.7 - Local File Inclusion vulnerability
CVE-2025-67528	WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability
CVE-2025-67529	WordPress Fashion theme < 5.3.0 - Local File Inclusion vulnerability
CVE-2025-67530	WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability
CVE-2025-67531	WordPress Turitor theme < 1.5.3 - Local File Inclusion vulnerability
CVE-2025-67532	WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability
CVE-2025-67615	WordPress Myour theme <= 1.5.1 - Local File Inclusion vulnerability
CVE-2025-67616	WordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability
CVE-2025-68061	WordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerability
CVE-2025-68062	WordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability
CVE-2025-68063	WordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerab...
CVE-2025-68064	WordPress Goya Core plugin < 1.0.9.4 - Local File Inclusion vulnerability
CVE-2025-68065	WordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerability
CVE-2025-68066	WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability
CVE-2025-68067	WordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerability
CVE-2025-68068	WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability
CVE-2025-68506	WordPress Docket Cache plugin <= 24.07.03 - Local File Inclusion vulnerability
CVE-2025-68510	WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability
CVE-2025-68530	WordPress Bookory theme <= 2.2.7 - Local File Inclusion vulnerability
CVE-2025-68536	WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability
CVE-2025-68537	WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability
CVE-2025-68539	WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability
CVE-2025-68540	WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability
CVE-2025-68543	WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability
CVE-2025-68544	WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability
CVE-2025-68545	WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability
CVE-2025-68546	WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability
CVE-2025-68552	WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Local File Inclusion vulnerability
CVE-2025-68560	WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerability
CVE-2025-68563	WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion vulnerability
CVE-2025-69034	WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-69037	WordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability
CVE-2025-69038	WordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability
CVE-2025-69039	WordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability
CVE-2025-69040	WordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability
CVE-2025-69041	WordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability
CVE-2025-69042	WordPress Lindo theme <= 1.2.5 - Local File Inclusion vulnerability
CVE-2025-69043	WordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability
CVE-2025-69044	WordPress Vango theme <= 1.3.3 - Local File Inclusion vulnerability
CVE-2025-69046	WordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability
CVE-2025-69047	WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability
CVE-2025-69049	WordPress Töbel theme <= 1.6 - Local File Inclusion vulnerability
CVE-2025-69050	WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability
CVE-2025-69057	WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability
CVE-2025-49369	WordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability
CVE-2025-49370	WordPress Lymcoin theme <= 1.3.12 - Local File Inclusion vulnerability
CVE-2025-49371	WordPress Strux theme <= 1.9 - Local File Inclusion vulnerability
CVE-2025-49383	WordPress Neresa Theme <= 1.3 - Local File Inclusion Vulnerability
CVE-2025-49403	WordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability
CVE-2025-67920	WordPress Neo Ocular theme < 1.2 - Local File Inclusion vulnerability
CVE-2025-67925	WordPress Corpkit theme <= 2.0 - Local File Inclusion vulnerability
CVE-2025-67934	WordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability
CVE-2025-67935	WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability
CVE-2025-67936	WordPress Curly theme < 3.3 - Local File Inclusion vulnerability
CVE-2025-67937	WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability
CVE-2025-67938	WordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability
CVE-2025-67940	WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability
CVE-2025-67941	WordPress The Aisle theme < 2.9.1 - Local File Inclusion vulnerability
CVE-2025-67946	WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability
CVE-2025-67955	WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability
CVE-2025-67957	WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability
CVE-2025-67980	WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability
CVE-2025-67981	WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability
CVE-2025-67982	WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability
CVE-2025-67988	WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability
CVE-2025-67992	WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability
CVE-2025-68841	WordPress TopperPack – Complete Elementor Addons, theme & CPT Builder plugin <= 1.2.1 - Local File Inclusion vulnerability
CVE-2025-68870	WordPress CookieHint WP plugin <= 1.0.0 - Local File Inclusion vulnerability
CVE-2025-68877	WordPress CedCommerce Integration for Good Market plugin <= 1.0.6 - Local File Inclusion vulnerability
CVE-2025-68886	WordPress Cookiteer theme <= 1.4.8 - Local File Inclusion vulnerability
CVE-2025-68905	WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
CVE-2025-68908	WordPress Barberry theme <= 2.9.9.87 - Local File Inclusion vulnerability
CVE-2025-68913	WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability
CVE-2025-68974	WordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability
CVE-2025-68983	WordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerability
CVE-2025-68984	WordPress Puca theme <= 2.6.39 - Local File Inclusion vulnerability
CVE-2025-68985	WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability
CVE-2025-68987	WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability
CVE-2025-68996	WordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability
CVE-2025-69004	WordPress Bajaar - Highly Customizable WooCommerce WordPress Theme theme <= 2.1.0 - Local File Inclusion vulnerability
CVE-2025-69005	WordPress Search & Go theme <= 2.8 - Local File Inclusion vulnerability
CVE-2025-69314	WordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability
CVE-2025-69322	WordPress PeakShops theme < 1.5.9 - Local File Inclusion vulnerability
CVE-2025-69339	WordPress Molla theme <= 1.5.16 - Local File Inclusion vulnerability
CVE-2025-69342	WordPress Calafate theme <= 1.7.7 - Local File Inclusion vulnerability
CVE-2025-69356	WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerability
CVE-2025-69369	WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability
CVE-2025-69373	WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File Inclusion vulnerability
CVE-2025-69374	WordPress Eleblog – Elementor Blog And Magazine Addons plugin <= 2.0.3 - Local File Inclusion vulnerability
CVE-2025-69375	WordPress Portfolio Builder plugin <= 1.2.5 - Local File Inclusion vulnerability
CVE-2025-69383	WordPress WP shop plugin <= 2.6.1 - Local File Inclusion vulnerability
CVE-2025-69387	WordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability
CVE-2025-69395	WordPress Gable theme <= 1.5 - Local File Inclusion vulnerability
CVE-2025-69396	WordPress Splendour theme <= 1.23 - Local File Inclusion vulnerability
CVE-2025-69397	WordPress Tint theme <= 1.7 - Local File Inclusion vulnerability
CVE-2025-69398	WordPress Plank theme <= 1.7 - Local File Inclusion vulnerability
CVE-2025-69399	WordPress Cobble theme <= 1.7 - Local File Inclusion vulnerability
CVE-2025-69400	WordPress Yokoo theme <= 1.1.11 - Local File Inclusion vulnerability
CVE-2025-69402	WordPress R&F theme <= 1.5 - Local File Inclusion vulnerability
CVE-2025-69406	WordPress FreightCo theme <= 1.1.7 - Local File Inclusion vulnerability
CVE-2025-69407	WordPress Struktur theme <= 2.5.1 - Local File Inclusion vulnerability
CVE-2025-69408	WordPress HealthFirst theme <= 1.0.1 - Local File Inclusion vulnerability
CVE-2025-69409	WordPress PJ \| Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability
CVE-2025-69410	WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability
CVE-2025-64216	WordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability
CVE-2025-64223	WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability
CVE-2025-64284	WordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability
CVE-2025-64287	WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability
CVE-2026-0926	Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name]
CVE-2026-1257	Administrative Shortcodes <= 0.3.4 - Authenticated (Contributor+) Local File Inclusion via 'slug' Shortcode Attribute
CVE-2026-12923	Video Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter
CVE-2026-1463	Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion
CVE-2025-69058	WordPress PartyMaker theme <= 1.1.15 - Local File Inclusion vulnerability
CVE-2025-69059	WordPress DiveIt theme <= 1.4.3 - Local File Inclusion vulnerability
CVE-2025-69060	WordPress uReach theme <= 1.3.3 - Local File Inclusion vulnerability
CVE-2025-69061	WordPress MoveMe theme <= 1.2.15 - Local File Inclusion vulnerability
CVE-2025-69062	WordPress Weedles theme <= 1.1.12 - Local File Inclusion vulnerability
CVE-2025-69064	WordPress Pets Land theme <= 1.2.8 - Local File Inclusion vulnerability
CVE-2025-69065	WordPress Snow Mountain theme <= 1.4.3 - Local File Inclusion vulnerability
CVE-2025-69066	WordPress Indoor Plants theme <= 1.2.7 - Local File Inclusion vulnerability
CVE-2025-69067	WordPress Tails theme <= 1.4.12 - Local File Inclusion vulnerability
CVE-2025-69068	WordPress Muji theme <= 1.2.0 - Local File Inclusion vulnerability
CVE-2025-69070	WordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability
CVE-2025-69071	WordPress TanTum theme <= 1.1.13 - Local File Inclusion vulnerability
CVE-2025-69072	WordPress Prider theme <= 1.1.3.1 - Local File Inclusion vulnerability
CVE-2025-69073	WordPress Piqes theme <= 1.0.11 - Local File Inclusion vulnerability
CVE-2025-69074	WordPress Pearson Specter theme <= 1.11.3 - Local File Inclusion vulnerability
CVE-2025-69075	WordPress Yolox theme <= 1.0.15 - Local File Inclusion vulnerability
CVE-2025-69076	WordPress Modern Housewife theme <= 1.0.12 - Local File Inclusion vulnerability
CVE-2025-69077	WordPress Hobo theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2025-69078	WordPress Malta theme <= 1.3.3 - Local File Inclusion vulnerability
CVE-2025-69080	WordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability
CVE-2025-69081	WordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability
CVE-2025-69083	WordPress Frappé theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-69086	WordPress Issabella theme <= 1.1.2 - Local File Inclusion vulnerability
CVE-2025-69087	WordPress FreeAgent theme <= 2.1.2 - Local File Inclusion vulnerability
CVE-2025-69090	WordPress Remons theme <= 1.3.4 - Local File Inclusion vulnerability
CVE-2025-69100	WordPress North theme <= 5.7.5 - Local File Inclusion vulnerability
CVE-2025-69105	WordPress Modernee theme <= 1.6.0 - Local File Inclusion vulnerability
CVE-2025-69106	WordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability
CVE-2025-69107	WordPress Rosaleen theme <= 2.8 - Local File Inclusion vulnerability
CVE-2025-69109	WordPress Raider Spirit theme <= 1.1.2 - Local File Inclusion vulnerability
CVE-2025-69110	WordPress AirSupply theme <= 2.0.0 - Local File Inclusion vulnerability
CVE-2025-69112	WordPress Planty theme <= 1.14.0 - Local File Inclusion vulnerability
CVE-2025-69113	WordPress Nexio theme <= 1.10.0 - Local File Inclusion vulnerability
CVE-2025-69114	WordPress MaxiNet theme <= 1.2.10 - Local File Inclusion vulnerability
CVE-2025-69115	WordPress LuxMed \| Medicine & Healthcare Doctor WordPress Theme theme <= 1.2.2 - Local File Inclusion vulnerability
CVE-2025-69116	WordPress Iona theme <= 1.0.8 - Local File Inclusion vulnerability
CVE-2025-69117	WordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability
CVE-2025-69118	WordPress CopyPress theme <= 1.4.5 - Local File Inclusion vulnerability
CVE-2025-69119	WordPress Corbesier theme <= 1.15.0 - Local File Inclusion vulnerability
CVE-2025-69120	WordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability
CVE-2025-69121	WordPress Deliciosa theme <= 1.10.0 - Local File Inclusion vulnerability
CVE-2025-69123	WordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability
CVE-2025-69124	WordPress Especio theme <= 1.0 - Local File Inclusion vulnerability
CVE-2025-69125	WordPress Food Drop theme <= 1.3 - Local File Inclusion vulnerability
CVE-2025-69126	WordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability
CVE-2025-69136	WordPress Wanium theme <= 1.9.8 - Local File Inclusion vulnerability
CVE-2025-69141	WordPress Kelly Young theme <= 1.1.0 - Local File Inclusion vulnerability
CVE-2025-69142	WordPress Abelle theme <= 1.22 - Local File Inclusion vulnerability
CVE-2025-69143	WordPress Mission theme <= 1.22 - Local File Inclusion vulnerability
CVE-2025-69144	WordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability
CVE-2025-69145	WordPress Gat theme <= 1.16 - Local File Inclusion vulnerability
CVE-2025-69146	WordPress Dom theme <= 1.24 - Local File Inclusion vulnerability
CVE-2025-69147	WordPress Putter theme <= 1.17 - Local File Inclusion vulnerability
CVE-2025-69148	WordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability
CVE-2025-69149	WordPress Top Dog theme <= 1.0.5 - Local File Inclusion vulnerability
CVE-2025-69150	WordPress Medeus theme <= 1.14 - Local File Inclusion vulnerability
CVE-2025-69157	WordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability
CVE-2025-69158	WordPress Granola theme <= 1.13 - Local File Inclusion vulnerability
CVE-2025-69159	WordPress Printo theme <= 1.11 - Local File Inclusion vulnerability
CVE-2025-69160	WordPress Gita theme <= 1.11 - Local File Inclusion vulnerability
CVE-2025-69161	WordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability
CVE-2025-69162	WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability
CVE-2025-69163	WordPress WineShop theme <= 3.17 - Local File Inclusion vulnerability
CVE-2025-69164	WordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability
CVE-2025-69165	WordPress Choreo theme <= 1.6 - Local File Inclusion vulnerability
CVE-2025-69166	WordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability
CVE-2025-69167	WordPress Eros theme <= 1.3 - Local File Inclusion vulnerability
CVE-2025-69168	WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability
CVE-2025-69170	WordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability
CVE-2025-69171	WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability
CVE-2025-69172	WordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability
CVE-2025-6991	Kallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2026-1620	Livemesh Addons by Elementor <= 9.0 - Authenticated (Contributor+) Local File Inclusion via Widget Template Parameter
CVE-2026-1988	Flexi Product Slider and Grid for WooCommerce <= 1.0.5 - Authenticated (Contributor+) Local File Inclusion via 'theme' Shortc...
CVE-2026-22324	WordPress Melania theme <= 2.5.0 - Local File Inclusion vulnerability
CVE-2026-22325	WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability
CVE-2026-22326	WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability
CVE-2026-22330	WordPress Right Way theme <= 4.0 - Local File Inclusion vulnerability
CVE-2026-22331	WordPress AutoParts theme <= 1.5.8 - Local File Inclusion vulnerability
CVE-2026-22338	WordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability
CVE-2026-22344	WordPress FiveStar theme <= 1.7 - Local File Inclusion vulnerability
CVE-2026-22356	WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability
CVE-2026-22361	WordPress A-Mart theme <= 1.0.2 - Local File Inclusion vulnerability
CVE-2026-22362	WordPress Photolia theme <= 1.0.3 - Local File Inclusion vulnerability
CVE-2026-22363	WordPress Rhodos theme <= 1.3.3 - Local File Inclusion vulnerability
CVE-2026-22364	WordPress SevenTrees theme <=1.0.2 - Local File Inclusion vulnerability
CVE-2026-22365	WordPress Soleng theme <= 1.0.5 - Local File Inclusion vulnerability
CVE-2026-22366	WordPress Jude theme <= 1.3.0 - Local File Inclusion vulnerability
CVE-2026-22367	WordPress Coworking theme <= 1.6.1 - Local File Inclusion vulnerability
CVE-2026-22368	WordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability
CVE-2026-22369	WordPress Ironfit theme <= 1.5 - Local File Inclusion vulnerability
CVE-2026-22370	WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability
CVE-2026-22371	WordPress Gustavo theme <= 1.2.2 - Local File Inclusion vulnerability
CVE-2026-22372	WordPress Isida theme <= 1.4.2 - Local File Inclusion vulnerability
CVE-2026-22373	WordPress Fooddy theme <= 1.3.10 - Local File Inclusion vulnerability
CVE-2026-22374	WordPress Zio Alberto theme <= 1.2.2 - Local File Inclusion vulnerability
CVE-2026-22375	WordPress Impacto Patronus theme <= 1.2.3 - Local File Inclusion vulnerability
CVE-2026-22376	WordPress Parkivia theme <= 1.1.9 - Local File Inclusion vulnerability
CVE-2026-22377	WordPress Saveo theme <= 1.1.2 - Local File Inclusion vulnerability
CVE-2026-22378	WordPress Blabber theme <= 1.7.0 - Local File Inclusion vulnerability
CVE-2026-22379	WordPress Netmix theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2026-22380	WordPress UnlimHost theme <= 1.2.3 - Local File Inclusion vulnerability
CVE-2026-22381	WordPress PawFriends - Pet Shop and Veterinary WordPress Theme theme <= 1.3 - Local File Inclusion vulnerability
CVE-2026-22385	WordPress Wolmart theme <= 1.9.6 - Local File Inclusion vulnerability
CVE-2026-22387	WordPress Aviana theme <= 2.1 - Local File Inclusion vulnerability
CVE-2026-22389	WordPress Cocco theme <= 2.0 - Local File Inclusion vulnerability
CVE-2026-22392	WordPress Cortex theme <= 1.9 - Local File Inclusion vulnerability
CVE-2026-22394	WordPress Evently theme <= 1.7 - Local File Inclusion vulnerability
CVE-2026-22395	WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-22397	WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability
CVE-2026-22399	WordPress Holmes theme <= 1.7 - Local File Inclusion vulnerability
CVE-2026-22401	WordPress Freshio theme <= 2.4.2 - Local File Inclusion vulnerability
CVE-2026-22402	WordPress Triply theme <= 2.4.7 - Local File Inclusion vulnerability
CVE-2026-22403	WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability
CVE-2026-22405	WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability
CVE-2026-22408	WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-22410	WordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability
CVE-2026-22412	WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability
CVE-2026-22413	WordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability
CVE-2026-22414	WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-22415	WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability
CVE-2026-22416	WordPress FixTeam theme <= 1.5.0 - Local File Inclusion vulnerability
CVE-2026-22418	WordPress Great Lotus theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2026-22419	WordPress Honor theme <= 2.3 - Local File Inclusion vulnerability
CVE-2026-22420	WordPress Horizon theme <= 1.1 - Local File Inclusion vulnerability
CVE-2026-22421	WordPress Quantum theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-22423	WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerability
CVE-2026-22424	WordPress Shaha theme <= 1.1.2 - Local File Inclusion vulnerability
CVE-2026-22425	WordPress Sweet Jane theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-22427	WordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability
CVE-2026-22428	WordPress Tooth Fairy theme <= 1.16 - Local File Inclusion vulnerability
CVE-2026-22429	WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability
CVE-2026-22431	WordPress Wabi-Sabi theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-22432	WordPress Woopy theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-22433	WordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability
CVE-2026-22434	WordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability
CVE-2026-22435	WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability
CVE-2025-58707	WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-58708	WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability
CVE-2025-58709	WordPress Legacy theme <= 1.9 - Local File Inclusion vulnerability
CVE-2025-58803	WordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability
CVE-2025-7327	Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
CVE-2025-7634	WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion
CVE-2025-7650	BizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-7721	JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion
CVE-2025-8142	Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
CVE-2025-8913	WellChoose｜Organization Portal System - Local File Inclusion
CVE-2025-9874	Ultimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-9990	WordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion
CVE-2025-9991	Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion
CVE-2025-9993	Bei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusion
CVE-2026-22464	WordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability
CVE-2026-22476	WordPress Etchy theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-22477	WordPress Felizia theme <= 1.3.4 - Local File Inclusion vulnerability
CVE-2026-22478	WordPress FindAll theme <= 1.4 - Local File Inclusion vulnerability
CVE-2026-24635	WordPress EduBlink Core plugin <= 2.0.7 - Local File Inclusion vulnerability
CVE-2026-25017	WordPress NaturaLife Extensions plugin <= 2.1 - Local File Inclusion vulnerability
CVE-2026-22493	WordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerability
CVE-2026-22494	WordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability
CVE-2026-22495	WordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability
CVE-2026-22496	WordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability
CVE-2026-22498	WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability
CVE-2026-22499	WordPress Lella theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-22502	WordPress Mr. Cobbler theme <= 1.1.9 - Local File Inclusion vulnerability
CVE-2026-22503	WordPress Nelson theme <= 1.2.0 - Local File Inclusion vulnerability
CVE-2026-22504	WordPress ProLingua theme <= 1.1.12 - Local File Inclusion vulnerability
CVE-2026-22506	WordPress Amoli theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-22508	WordPress Dentalux theme <= 3.3 - Local File Inclusion vulnerability
CVE-2026-22509	WordPress Gioia theme <= 1.4 - Local File Inclusion vulnerability
CVE-2026-22511	WordPress NeoBeat theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-22512	WordPress Roisin theme <= 1.2.1 - Local File Inclusion vulnerability
CVE-2026-22513	WordPress Triompher theme <= 1.1.0 - Local File Inclusion vulnerability
CVE-2026-22514	WordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability
CVE-2026-22515	WordPress VegaDays theme <= 1.2.0 - Local File Inclusion vulnerability
CVE-2026-22516	WordPress Wizor's theme <= 2.12 - Local File Inclusion vulnerability
CVE-2026-22521	WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability
CVE-2026-25326	WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability
CVE-2026-25379	WordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability
CVE-2026-25380	WordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerability
CVE-2026-25381	WordPress LoveDate theme < 3.8.6 - Local File Inclusion vulnerability
CVE-2026-25382	WordPress IdealAuto theme < 3.8.6 - Local File Inclusion vulnerability
CVE-2026-25457	WordPress Mixtape theme <= 2.1 - Local File Inclusion vulnerability
CVE-2026-25458	WordPress Moments theme <= 2.2 - Local File Inclusion vulnerability
CVE-2026-25464	WordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerability
CVE-2026-27065	WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2026-27075	WordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-27076	WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-27077	WordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-27078	WordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability
CVE-2026-27079	WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability
CVE-2026-27080	WordPress Deston theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-27081	WordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability
CVE-2026-27093	WordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerability
CVE-2026-27097	WordPress CasaMia \| Property Rental Real Estate WordPress Theme theme <= 1.1.2 - Local File Inclusion vulnerability
CVE-2026-27381	WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability
CVE-2026-27383	WordPress Metro theme <= 2.13 - Local File Inclusion vulnerability
CVE-2026-27894	LAM has Authenticated Local File Inclusion (LFI) in PDF export
CVE-2026-27985	WordPress Humanum theme <= 1.1.4 - Local File Inclusion vulnerability
CVE-2026-27986	WordPress OsTende theme <= 1.4.3 - Local File Inclusion vulnerability
CVE-2026-27987	WordPress The Qlean theme <= 2.12 - Local File Inclusion vulnerability
CVE-2026-27988	WordPress Equadio theme <= 1.1.3 - Local File Inclusion vulnerability
CVE-2026-27989	WordPress Quanzo theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2026-27990	WordPress ConFix theme <= 1.013 - Local File Inclusion vulnerability
CVE-2026-27991	WordPress Avventure theme <= 1.1.12 - Local File Inclusion vulnerability
CVE-2026-27992	WordPress Meals & Wheels theme <= 1.1.12 - Local File Inclusion vulnerability
CVE-2026-27993	WordPress Aldo theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2026-27994	WordPress Tediss theme <= 1.2.4 - Local File Inclusion vulnerability
CVE-2026-27995	WordPress Justitia theme <= 1.1.0 - Local File Inclusion vulnerability
CVE-2025-69173	WordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability
CVE-2025-69174	WordPress Etude theme <= 1.6 - Local File Inclusion vulnerability
CVE-2025-69175	WordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2025-69176	WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability
CVE-2025-69177	WordPress Roneous theme <= 2.1.5 - Local File Inclusion vulnerability
CVE-2025-69178	WordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerability
CVE-2026-23975	WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability
CVE-2026-23978	WordPress Gyan Elements plugin <= 2.2.1 - Local File Inclusion vulnerability
CVE-2026-28107	WordPress Muzicon theme <= 1.9.0 - Local File Inclusion vulnerability
CVE-2026-28117	WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability
CVE-2026-28118	WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability
CVE-2026-28119	WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability
CVE-2026-28120	WordPress Dr.Patterson theme <= 1.3.2 - Local File Inclusion vulnerability
CVE-2026-28121	WordPress Anderson theme <= 1.4.2 - Local File Inclusion vulnerability
CVE-2026-28123	WordPress Veil theme <= 1.9 - Local File Inclusion vulnerability
CVE-2026-28124	WordPress Notarius theme <= 1.9 - Local File Inclusion vulnerability
CVE-2026-28125	WordPress Midi theme <= 1.14 - Local File Inclusion vulnerability
CVE-2026-28128	WordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability
CVE-2026-28129	WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability
CVE-2026-32364	WordPress Turbo Manager plugin < 4.0.8 - Local File Inclusion vulnerability
CVE-2026-32369	WordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability
CVE-2026-32384	WordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability
CVE-2026-32392	WordPress Greenly theme <= 8.1 - Local File Inclusion vulnerability
CVE-2026-32393	WordPress Greenly Theme Addons plugin < 8.2 - Local File Inclusion vulnerability
CVE-2026-32400	WordPress Boldman theme <= 7.7 - Local File Inclusion vulnerability
CVE-2026-32401	WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability
CVE-2026-32426	WordPress Medilazar Core plugin < 1.4.7 - Local File Inclusion vulnerability
CVE-2026-32500	WordPress MetaMax theme <= 1.1.4 - Local File Inclusion vulnerability
CVE-2026-32503	WordPress Trendustry theme <= 1.1.4 - Local File Inclusion vulnerability
CVE-2026-32504	WordPress VintWood theme <= 1.1.8 - Local File Inclusion vulnerability
CVE-2026-32505	WordPress Kiddy theme <= 2.0.8 - Local File Inclusion vulnerability
CVE-2026-32531	WordPress Kunco theme < 1.4.5 - Local File Inclusion vulnerability
CVE-2026-22436	WordPress Helvig theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-22437	WordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability
CVE-2026-22439	WordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability
CVE-2026-22441	WordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-22442	WordPress Tribe theme <= 1.7.3 - Local File Inclusion vulnerability
CVE-2026-22443	WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability
CVE-2026-22446	WordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerability
CVE-2026-22449	WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability
CVE-2026-22452	WordPress Hoverex theme <= 1.5.10 - Local File Inclusion vulnerability
CVE-2026-22456	WordPress Askka theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-22457	WordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability
CVE-2026-23801	WordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability
CVE-2026-24390	WordPress Kentha Elementor Widgets plugin < 3.1 - Local File Inclusion vulnerability
CVE-2026-24531	WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability
CVE-2026-24538	WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability
CVE-2026-24608	WordPress Laurent Core plugin <= 2.4.1 - Local File Inclusion vulnerability
CVE-2026-24609	WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability
CVE-2026-25027	WordPress Unicamp theme <= 2.7.1 - Local File Inclusion vulnerability
CVE-2026-34787	Emlog: Local File Inclusion in plugin.php via unsanitized plugin parameter
CVE-2026-34893	WordPress Thegov Core plugin < 2.0.23 - Local File Inclusion vulnerability
CVE-2026-34894	WordPress Integrio Core plugin < 1.2.8 - Local File Inclusion vulnerability
CVE-2026-34895	WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability
CVE-2026-3826	WellChoose｜IFTOP - Local File Inclusion
CVE-2026-39387	BoidCMS: Local File Inclusion (LFI) leads to Remote Code Execution (RCE) via tpl parameter
CVE-2026-39522	WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability
CVE-2026-39523	WordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability
CVE-2026-39537	WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
CVE-2026-39538	WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
CVE-2026-39544	WordPress LabtechCO theme <= 8.3 - Local File Inclusion vulnerability
CVE-2026-39547	WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability
CVE-2026-39549	WordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerability
CVE-2026-39552	WordPress Blueprint theme < 1.1.5 - Local File Inclusion vulnerability
CVE-2026-39553	WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability
CVE-2026-39558	WordPress Malmö theme <= 2.2 - Local File Inclusion vulnerability
CVE-2026-39559	WordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability
CVE-2026-39568	WordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerability
CVE-2026-39582	WordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability
CVE-2026-39590	WordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerability
CVE-2026-39611	WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
CVE-2026-27996	WordPress Lingvico theme <= 1.0.14 - Local File Inclusion vulnerability
CVE-2026-27997	WordPress Maxify theme <= 1.0.16 - Local File Inclusion vulnerability
CVE-2026-27998	WordPress Vixus theme <= 1.0.16 - Local File Inclusion vulnerability
CVE-2026-28006	WordPress Yungen theme <= 1.0.12 - Local File Inclusion vulnerability
CVE-2026-28007	WordPress Coinpress theme <= 1.0.14 - Local File Inclusion vulnerability
CVE-2026-28009	WordPress DroneX theme <= 1.1.12 - Local File Inclusion vulnerability
CVE-2026-28010	WordPress Scientia theme <= 1.2.4 - Local File Inclusion vulnerability
CVE-2026-28011	WordPress Yottis theme <= 1.0.10 - Local File Inclusion vulnerability
CVE-2026-28012	WordPress Gridiron theme <= 1.0.14 - Local File Inclusion vulnerability
CVE-2026-28013	WordPress Kratz theme <= 1.0.12 - Local File Inclusion vulnerability
CVE-2026-28014	WordPress Translogic theme <= 1.2.11 - Local File Inclusion vulnerability
CVE-2026-28015	WordPress ShiftCV theme <= 3.0.14 - Local File Inclusion vulnerability
CVE-2026-28016	WordPress Luxury Wine theme <= 1.1.14 - Local File Inclusion vulnerability
CVE-2026-28017	WordPress Green Thumb theme <= 1.1.12 - Local File Inclusion vulnerability
CVE-2026-28018	WordPress Global Logistics theme <= 3.20 - Local File Inclusion vulnerability
CVE-2026-28019	WordPress Manoir theme <= 1.11 - Local File Inclusion vulnerability
CVE-2026-28020	WordPress Chroma theme <= 1.11 - Local File Inclusion vulnerability
CVE-2026-28021	WordPress Craftis theme <= 1.2.8 - Local File Inclusion vulnerability
CVE-2026-28022	WordPress Foodie theme <= 1.14 - Local File Inclusion vulnerability
CVE-2026-28023	WordPress Nuts theme <= 1.10 - Local File Inclusion vulnerability
CVE-2026-28024	WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability
CVE-2026-28025	WordPress Stargaze theme <= 1.5 - Local File Inclusion vulnerability
CVE-2026-28026	WordPress Motorix theme <= 1.6 - Local File Inclusion vulnerability
CVE-2026-28027	WordPress Kayon theme <= 1.3 - Local File Inclusion vulnerability
CVE-2026-28028	WordPress MoneyFlow theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-28029	WordPress EmojiNation theme <= 1.0.12 - Local File Inclusion vulnerability
CVE-2026-28030	WordPress Bonbon theme <= 1.6 - Local File Inclusion vulnerability
CVE-2026-28031	WordPress Invetex theme <= 2.18 - Local File Inclusion vulnerability
CVE-2026-28032	WordPress Tuning theme <= 1.3 - Local File Inclusion vulnerability
CVE-2026-28033	WordPress Edifice theme <= 1.8 - Local File Inclusion vulnerability
CVE-2026-28034	WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-28035	WordPress Printy theme <= 1.8 - Local File Inclusion vulnerability
CVE-2026-28039	WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerability
CVE-2026-28041	WordPress Grit theme <= 1.0.1 - Local File Inclusion vulnerability
CVE-2026-28043	WordPress Healer - Doctor, Clinic & Medical WordPress Theme theme <= 1.0.0 - Local File Inclusion vulnerability
CVE-2026-28045	WordPress N7 \| Golf Club Sports & Events theme <= 2.16.0 - Local File Inclusion vulnerability
CVE-2026-28046	WordPress Law Office theme <= 3.3.0 - Local File Inclusion vulnerability
CVE-2026-28047	WordPress Victo theme <= 1.4.16 - Local File Inclusion vulnerability
CVE-2026-28048	WordPress FlashMart theme <= 2.0.15 - Local File Inclusion vulnerability
CVE-2026-28049	WordPress Police Department theme <= 2.17 - Local File Inclusion vulnerability
CVE-2026-28050	WordPress Beacon theme <= 2.24 - Local File Inclusion vulnerability
CVE-2026-28051	WordPress Yacht Rental theme <= 2.6 - Local File Inclusion vulnerability
CVE-2026-28052	WordPress Peter Mason theme <= 1.4.5 - Local File Inclusion vulnerability
CVE-2026-28053	WordPress Miller theme <= 1.3.3 - Local File Inclusion vulnerability
CVE-2026-28054	WordPress Legal Stone theme <= 1.2.11 - Local File Inclusion vulnerability
CVE-2026-28055	WordPress M.Williamson theme <= 1.2.11 - Local File Inclusion vulnerability
CVE-2026-28056	WordPress MCKinney's Politics theme <= 1.2.8 - Local File Inclusion vulnerability
CVE-2026-28057	WordPress Mandala theme <= 2.8 - Local File Inclusion vulnerability
CVE-2026-28058	WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability
CVE-2026-28059	WordPress Dermatology Clinic theme <= 1.4.3 - Local File Inclusion vulnerability
CVE-2026-28060	WordPress S.King theme <= 1.5.3 - Local File Inclusion vulnerability
CVE-2026-28061	WordPress Tiger Claw theme <= 1.1.14 - Local File Inclusion vulnerability
CVE-2026-28062	WordPress Happy Baby theme <= 1.2.12 - Local File Inclusion vulnerability
CVE-2026-28063	WordPress Asia Garden theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2026-28064	WordPress Edge Decor theme <= 2.2 - Local File Inclusion vulnerability
CVE-2026-28065	WordPress Eject theme <= 2.17 - Local File Inclusion vulnerability
CVE-2026-28066	WordPress Legrand theme <= 2.17 - Local File Inclusion vulnerability
CVE-2026-28067	WordPress Bassein theme <= 1.0.15 - Local File Inclusion vulnerability
CVE-2026-28068	WordPress Rhythmo theme <= 1.3.4 - Local File Inclusion vulnerability
CVE-2026-28069	WordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability
CVE-2026-28077	WordPress Vapester theme <= 1.1.10 - Local File Inclusion vulnerability
CVE-2026-28079	WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability
CVE-2026-28081	WordPress Windsor theme <= 2.5.0 - Local File Inclusion vulnerability
CVE-2026-39613	WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability
CVE-2026-39850	Yii 2: Local file inclusion via view parameter name collision
CVE-2026-40721	WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability
CVE-2026-28084	WordPress Bazinga theme <= 1.1.9 - Local File Inclusion vulnerability
CVE-2026-28085	WordPress Mahogany theme <= 2.9 - Local File Inclusion vulnerability
CVE-2026-28086	WordPress Run Gran theme <= 2.0 - Local File Inclusion vulnerability
CVE-2026-28087	WordPress Filmax theme <= 1.1.11 - Local File Inclusion vulnerability
CVE-2026-28088	WordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability
CVE-2026-28089	WordPress Daiquiri theme <= 1.2.4 - Local File Inclusion vulnerability
CVE-2026-28090	WordPress Gamezone theme <= 1.1.11 - Local File Inclusion vulnerability
CVE-2026-28091	WordPress Coleo theme <= 1.1.7 - Local File Inclusion vulnerability
CVE-2026-28092	WordPress Sounder theme <= 1.3.11 - Local File Inclusion vulnerability
CVE-2026-28093	WordPress Ozisti theme <= 1.1.10 - Local File Inclusion vulnerability
CVE-2026-28094	WordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability
CVE-2026-28095	WordPress Marcell theme <= 1.2.14 - Local File Inclusion vulnerability
CVE-2026-28096	WordPress WealthCo theme <= 2.18 - Local File Inclusion vulnerability
CVE-2026-28097	WordPress Artrium theme <= 1.0.14 - Local File Inclusion vulnerability
CVE-2026-28098	WordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability
CVE-2026-39623	WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability
CVE-2026-39661	WordPress SW Core plugin <= 1.7.18 - Local File Inclusion vulnerability
CVE-2026-40731	WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability
CVE-2026-44239	FreePBX: Authenticated Local File Inclusion in Dashboard Module
CVE-2026-48972	WordPress SeedProd Pro plugin < 6.19.5 - Local File Inclusion vulnerability
CVE-2026-49954	Discuz! X5.0 Local File Inclusion via enable_disable.php Plugin Directory
CVE-2026-54814	WordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability
CVE-2026-54845	WordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability
CVE-2026-57647	WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
CVE-2026-7515	BetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style
CVE-2026-7522	Advanced Database Cleaner – Premium <= 4.1.0 - Authenticated (Subscriber+) Local File Inclusion via 'template'
CVE-2026-8134	Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP Fil...
CVE-2026-8208	Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report...
CVE-2026-9200	Query Shortcode <= 0.2.1 - Authenticated (Contributor+) Local File Inclusion via 'lens' Shortcode Attribute
CVE-2026-9559	A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during c...
CVE-2026-9662	Recover Exit For WooCommerce <= 1.0.3 - Unauthenticated Local File Inclusion via 'tpf' Parameter
CVE-2026-32537	WordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability
CVE-2026-33130	Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)
CVE-2026-33513	AVideo has an Unauthenticated Local File Inclusion in API locale (RCE possible with writable PHP)
CVE-2026-34036	Dolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php
CVE-2026-3425	RTMKit Addons for Elementor <= 2.0.2 - Authenticated (Author+) Local File Inclusion via 'path'
CVE-2026-25548	InvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log Poisoning
CVE-2026-27047	WordPress Curly Core plugin <= 2.1.6 - Local File Inclusion vulnerability
CVE-2026-27048	WordPress The Aisle Core plugin <= 2.0.5 - Local File Inclusion vulnerability
CVE-2026-27052	WordPress Sales Countdown Timer for WooCommerce and WordPress plugin < 1.1.9 - Local File Inclusion vulnerability
CVE-2026-27326	WordPress AC Services \| HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulner...
CVE-2026-27334	WordPress Alchemists theme <= 4.6.0 - Local File Inclusion vulnerability
CVE-2026-27335	WordPress Ekoterra - NonProfit, Green Energy & Ecology Theme theme <= 1.0.0 - Local File Inclusion vulnerability
CVE-2026-27336	WordPress Consultor \| Consulting, Accounting & Legal Counsel WordPress Theme theme <= 1.2.4 - Local File Inclusion vulnerabil...
CVE-2026-27337	WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability
CVE-2026-27339	WordPress Buzz Stone \| Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - Local File Inclusion vulnerability
CVE-2026-27340	WordPress Apollo \| Night Club, DJ Event WordPress Theme theme <= 1.3.1 - Local File Inclusion vulnerability
CVE-2026-27341	WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability
CVE-2026-27342	WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability
CVE-2026-27343	WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability
CVE-2026-39677	WordPress Emphires theme <= 3.9 - Local File Inclusion vulnerability
CVE-2026-39679	WordPress Freeio theme <= 1.3.21 - Local File Inclusion vulnerability
CVE-2026-39681	WordPress Homeo theme <= 1.2.59 - Local File Inclusion vulnerability
CVE-2026-39684	WordPress OrganicFood theme <= 3.6.4 - Local File Inclusion vulnerability
CVE-2026-41228	Froxlor has Local File Inclusion via path traversal in API `def_language` parameter that leads to Remote Code Execution
CVE-2026-48133	Identity Awareness Captive Portal - Unauthenticated Local File Inclusion
CVE-2026-48820	CakePHP: View::element() is missing a path containment check

Exploits & Shellcodes

Идентификатор	Тип	Описание	Дата публикации
EDB-52598	Exploit	Prodigy Commerce 3.3.0 - Local File Inclusion	29.05.2026
EDB-49045	Exploit	October CMS Build 465 - Arbitrary File Read Exploit (Authenticated)	13.11.2020
EDB-43388	Exploit	Trend Micro Smart Protection Server - Session Hijacking / Log File Disclosure / Remote Command Execution / Cron Job Injection / Local File Inclusion / Stored Cross-Site Scripting /...	19.12.2017

НКЦКИ уязвимости

Бюллетени НКЦКИ - уязвимости ПО

Идентификатор	Дата бюллетеня	Описание
VULN:20240517-39	17.05.2024	Выполнение произвольного кода в Moodle
VULN:20240517-40	17.05.2024	Выполнение произвольного кода в Moodle
VULN:20240517-41	17.05.2024	Выполнение произвольного кода в Moodle
VULN:20240517-42	17.05.2024	Выполнение произвольного кода в Moodle
VULN:20241007-42	07.10.2024	Выполнение произвольного кода в Optigo Networks ONS-S8 Spectra Aggregation Switch
VULN:20250117-48	17.01.2025	Получение конфиденциальной информации в ABB ASPECT-Enterprise, NEXUS, and MATRIX Series products

Мы используем cookie-файлы, чтобы получить статистику, которая помогает нам улучшить сервис для вас с целью персонализации сервисов и предложений. Вы может прочитать подробнее о cookie-файлах или изменить настройки браузера. Продолжая пользоваться сайтом, вы даёте согласие на использование ваших cookie-файлов и соглашаетесь с Политикой обработки персональных данных.