CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- ibrahim pricing table addon for elementorWordPress Pricing table addon for elementor plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- webbytemplate office locatorWordPress Office Locator plugin <= 1.3.0 - Local File Inclusion vulnerability7.5 High
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.4.2 - Authenticated (Contributor+) Local File Inclusion8.8 High
- krishaweb contact form 7 email add on, email addon for cf7 +1 moreContact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion8.8 High
- official pro coders nblocksWordPress nBlocks plugin <= 1.0.2 - Local File Inclusion vulnerability7.5 High
- peter ads booster by ads pro, scripteo ads booster +1 moreWordPress Ads Booster by Ads Pro plugin <= 1.12 - Local File Inclusion vulnerability8.1 High
- radiustheme classified listingWordPress Classified Listing plugin <= 3.1.16 - Local File Inclusion vulnerability5.3 Medium
- shoaib rehmat zij kartWordPress ZIJ KART plugin <= 1.1 - Local File Inclusion vulnerability8.1 High
- ays-pro chartify, chartify – wordpress chart plugin +1 moreChartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source9.8 Critical
- trustyplugins category ajax filter, category ajax filter – advanced filter for posts & custom post types +1 moreCategory Ajax Filter <= 2.8.2 - Unauthenticated Local File Inclusion9.8 Critical
- wpclever wpc smart messages for woocommerceWPC Smart Messages for WooCommerce <= 4.2.1 - Authenticated (Subscriber+) Local File Inclusion8.8 High
- theme horse newscardWordPress NewsCard theme <= 1.3 - Local File Inclusion vulnerability7.5 High
- theme horse meta newsWordPress Meta News theme <= 1.1.7 - Local File Inclusion vulnerability7.5 High
- theme horse clean retinaWordPress Clean Retina theme <= 3.0.6 - Local File Inclusion vulnerability7.5 High
- qode essential addons, qodeinteractive qode essential addons +1 moreWordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability7.5 High
- buynowdepot advanced online ordering and delivery platformWordPress Advanced Online Ordering and Delivery Platform plugin <= 2.0.0 - Local File Inclusion vulnerability8.1 High
- delabon wordpress post grid layouts with pagination – sogridWordPress Post Grid Layouts with Pagination – Sogrid <= 1.5.6 - Authenticated (Admin+) Local File Inclusion7.2 High
- qode qi blocksWordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability7.5 High
- theme horse mags, themehorse interface +1 moreWordPress Mags theme <= 1.1.6 - Local File Inclusion vulnerability7.5 High
- jon vincent mendoza dynamic elementor addonsWordPress Dynamic Elementor Addons plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- zipang point makerWordPress Point Maker plugin <= 0.1.4 - Local File Inclusion vulnerability7.5 High
- hung trang si sb random posts widgetWordPress SB Random Posts Widget plugin <= 1.0 - Local File Inclusion vulnerability7.5 High
- acnoo maan addons for elementorWordPress Maan Addons For Elementor plugin <= 1.0.1 - Local File Inclusion vulnerability7.5 High
- formosasoft ee-class, ee class +1 moreFormosaSoft ee-class - Local File Inclusion8.8 High
- ex-themes wp timeline – vertical and horizontal timeline plugin, wp timeline +1 moreWordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability8.1 High
- abc app creator app creator, abcapp creator +1 moreWordPress ABCApp Creator plugin <= 1.1.2 - Local File Inclusion vulnerability8.1 High
- optigo networks ons-s8 spectra aggregation switch, optigo ons-s8 firmware +1 moreOptigo Networks ONS-S8 Spectra Aggregation Switch PHP Remote File Inclusion9.3 Critical
- wpwax product carousel slider & grid ultimate for woocommerceWordPress Product Carousel Slider & Grid Ultimate for WooCommerce plugin <= 1.9.10 - Authenticated Local File Inclusion vulnerability6.5 Medium
- codection clean loginClean Login <= 1.14.5 - Authenticated (Contributor+) Local File Inclusion8.8 High
- zen cart cart, zen-cart zen cart +1 moreZen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability8.1 High
- hamed naderfar compute linksWordPress Compute Links plugin <= 1.2.1 - Remote File Inclusion vulnerability9.6 Critical
- bdthemes element pack, element pack – widgets, templates & addons for elementor +1 moreElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read6.5 Medium
- thimpress learnpress, learnpress – wordpress lms plugin for create and sell online courses +1 moreLearnPress <= 4.2.6.8.2 - Authenticated (Contributor+) Local File Inclusion8.8 High
- atlassian bamboo, bamboo data center, bamboo server +2 moreThis High severity File Inclusion vulnerability was introduced in versions 9.0.0, 9.1.0, 9.2.0, 9...8.1 High
- bastien ho event postWordPress Event post plugin <= 5.9.5 - Local File Inclusion vulnerability7.5 High
- radiustheme shopbuilder, shopbuilder – elementor woocommerce builder addons +1 moreWordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 2.1.12 - Local File Inclusion vulnerability6.5 Medium
- ideabox creations powerpack lite for beaver builder, ideabox powerpack for beaver builder +1 moreWordPress PowerPack Lite for Beaver Builder plugin <= 1.3.0.3 - Local File Inclusion vulnerability4.9 Medium
- la-studio element kit for elementorWordPress LA-Studio Element Kit for Elementor plugin <= 1.3.8.1 - Contributor+ Local File Inclusion vulnerability8.5 High
- themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 moreWPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode8.8 High
- posimyth the plus addons for elementor, posimyththemes the plus addons for elementor page builder pro, wordpress plus addon for elementor page builder +2 moreThe Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.6 - Authenticated (Contributor+) Local File Inclusion8.8 High
- codevibrant wp blog post layouts, wp blogpost layouts +1 moreWP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion8.8 High
- codevibrant wp magazine modules lite, wp-magazine-modules +1 moreWP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion7.5 High
- yotuwp video gallery – youtube playlist, channel gallery by yotuwp, video gallery +1 moreVideo Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Authenticated (Contributor+) Arbitrary File Inclusion via Shortcode6.4 Medium
- yotuwp video gallery – youtube playlist, channel gallery by yotuwp, video gallery +1 moreVideo Gallery – YouTube Playlist, Channel Gallery by YotuWP <= 1.3.13 - Unauthenticated Local File Inclusion9.8 Critical
- tagdiv composertagDiv Composer <= 4.8 - Authenticated (Contributor+) Local File Inclusion via Shortcode8.8 High
- mcnardelli where i was, where i will beWhere I Was, Where I Will Be <= 1.1.1 - Unauthenticated Remote File Inclusion9.8 Critical
- cantoCanto <= 3.0.8 - Unauthenticated Remote File Inclusion9.8 Critical
- salesagility suitecrmSuiteCRM Improper Control of Filename for Include Statement in PHP and Unrestricted Upload of File with Dangerous content leads to authenticated remote code execution9.1 Critical
- melapress login securityWordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability4.9 Medium
- qodeinteractive qi addons for elementorQi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion7.5 High
- Show moreLoading…