CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- everestthemes grace magWordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability7.5 High
- code work web cww portfolioWordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerability7.5 High
- holest engineering spreadsheet price changer for woocommerce and wp e-commerce – lightWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Local File Inclusion vulnerability7.5 High
- capturlyWordPress Capturly plugin <= 2.0.1 - Local File Inclusion vulnerability7.5 High
- cedcommerce product lister for ebayWordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerability7.5 High
- code work web xews liteWordPress Xews Lite plugin <= 1.0.9 - Local File Inclusion vulnerability7.5 High
- wpoperation opstoreWordPress Opstore theme <= 1.4.5 - Local File Inclusion vulnerability7.5 High
- zamartz checkout field visibility for woocommerceWordPress Checkout Field Visibility for WooCommerce plugin <= 1.3.0 - Local File Inclusion vulnerability7.5 High
- ashraful sarkar naiem license for envatoWordPress License For Envato plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- ghozylab popup builderWordPress Popup Builder plugin <= 1.1.35 - Local File Inclusion Vulnerability7.5 High
- formulatrix rock maker webLocal File Inclusion (LFI) leading to sensitive data exposure9.2 Critical
- jbhovik ray enterprise translationWordPress Ray Enterprise Translation plugin <= 1.7.0 - Local File Inclusion via CSRF Vulnerability7.5 High
- nicdark hotel bookingWordPress Hotel Booking Plugin <= 3.6 - Local File Inclusion vulnerability8.1 High
- földesi, mihály széchenyi 2020 logoWordPress Széchenyi 2020 Logo <= 1.1 - Local File Inclusion vulnerability7.5 High
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability7.5 High
- nawawi jamili docket cacheWordPress Docket Cache plugin <= 24.07.02 - Local File Inclusion vulnerability7.5 High
- teamzt smart agreementsWordPress Smart Agreements plugin <= 1.0.3 - Local File Inclusion vulnerability7.5 High
- sunnet technology co., ltd. wisdom master proWisdom Master Pro - Improper Control of Filename for Include/Require Statement in PHP Program9.9 Critical
- lomu wpcom memberWordPress WPCOM Member plugin <= 1.7.7 - Local File Inclusion Vulnerability8.8 High
- arraytics eventinWordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability7.5 High
- wp shuffle subscribe to unlock liteWordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion Vulnerability7.5 High
- magepeopleteam booking and rental managerWordPress Booking and Rental Manager plugin <= 2.2.8 - Local File Inclusion vulnerability7.5 High
- mobeen abdullah coming soon, maintenance modeWordPress Coming Soon, Maintenance Mode plugin <= 1.1.1 - Local File Inclusion vulnerability7.5 High
- hockeydata los, notfound hockeydata los +1 moreWordPress hockeydata LOS plugin <= 1.2.4 - Local File Inclusion vulnerability7.5 High
- g5theme ultimate bootstrap elements for elementorWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability8.1 High
- roninwp fat cooming soonWordPress FAT Cooming Soon plugin <= 1.1 - Local File Inclusion vulnerability8.1 High
- radiustheme testimonial slider and showcase proWordPress Testimonial Slider and Showcase Pro plugin <= 2.3.15 - Local File Inclusion vulnerability8.1 High
- stylemix motorsWordPress Motors plugin <= 1.4.71 - Local File Inclusion vulnerability8.1 High
- joomsky js job managerWordPress JS Job Manager plugin <= 2.0.2 - Local File Inclusion vulnerability8.1 High
- ashan perera eventonWordPress EventON plugin <= 2.4 - Local File Inclusion vulnerability8.8 High
- odude flexi – guest submitWordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability8.1 High
- hakeemnala build app onlineWordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability9.8 Critical
- foysal imran idonateWordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability8.1 High
- exthemes wp food ordering and restaurant menuWordPress WP Food ordering and Restaurant Menu plugin <= 2.7 - Local File Inclusion vulnerability8.1 High
- adrian tobey wordpress smtp service, email delivery solved! — mailhawkWordPress SMTP Service, Email Delivery Solved! — MailHawk plugin <= 1.3.1 - Local File Inclusion Vulnerability7.5 High
- hossein material dashboardWordPress Material Dashboard plugin <= 1.4.5 - Local File Inclusion Vulnerability7.5 High
- crocoblock jetcomparewishlistWordPress JetCompareWishlist plugin <= 1.5.9 - Local File Inclusion vulnerability7.5 High
- ashan perera eventonWordPress EventON plugin <= 2.4.1 - Local File Inclusion vulnerability7.5 High
- athemes addons for elementor, smub athemes addons for elementor +1 moreWordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability7.5 High
- rameez iqbal real estate managerWordPress Real Estate Manager plugin <= 7.3 - Local File Inclusion vulnerability8.1 High
- wpwax logo showcase ultimateWordPress Logo Showcase Ultimate plugin <= 1.4.4 - Local File Inclusion vulnerability6.5 Medium
- wp shuffle subscription formsWordPress WP Subscription Forms plugin <= 1.2.4 - Local File Inclusion Vulnerability7.5 High
- radiustheme radius blocksWordPress Radius Blocks plugin <= 2.2.1 - Local File Inclusion vulnerability7.5 High
- jakub glos sparkle elementor kitWordPress Sparkle Elementor Kit plugin <= 2.0.9 - Local File Inclusion vulnerability7.5 High
- alex prokopenko / justcoded just post preview widgetWordPress Just Post Preview Widget plugin <= 1.1.1 - Local File Inclusion vulnerability7.5 High
- markkinchin beds24 online bookingWordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability7.5 High
- catch themes dark mode, catchthemes catch dark mode +1 moreWordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability7.5 High
- vinagecko vg woocarouselWordPress VG WooCarousel plugin <= 1.3 - Local File Inclusion vulnerability7.5 High
- essential plugin slider a sliderspackWordPress Slider a SlidersPack Plugin <= 2.3 - Local File Inclusion vulnerability7.5 High
- themekraft buddyformsWordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…