CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- wp travel engine travel engineWordPress WP Travel Engine plugin <= 6.5.1 - Local File Inclusion Vulnerability7.5 High
- magazine3 wp multilangWordPress WP Multilang plugin <= 2.4.19 - Local File Inclusion Vulnerability7.5 High
- stylemixthemes motors - eventsWordPress Motors - Events plugin <= 1.4.7 - Unauthenticated Local File Inclusion vulnerability9.0 Critical
- sitecom wlx-2006 firmwareA Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender...5.9 Medium
- gavias vizeon - business consultingWordPress Vizeon theme < 1.2.1 - Local File Inclusion vulnerability8.1 High
- apustheme capieWordPress Capie theme <= 1.0.40 - Local File Inclusion Vulnerability8.1 High
- spyropress la boomWordPress La Boom <= 2.7 - Local File Inclusion Vulnerability8.1 High
- gavias enzio - responsive business wordpress themeWordPress Enzio - Responsive Business WordPress Theme theme < 1.2.6 - Local File Inclusion vulnerability8.1 High
- gavias kiamo - responsive business service wordpress themeWordPress Kiamo - Responsive Business Service WordPress Theme <= 1.3.3 - Local File Inclusion Vulnerability8.1 High
- apustheme ogamiWordPress Ogami theme <= 1.53 - Local File Inclusion Vulnerability8.1 High
- apustheme butcherWordPress Butcher theme <= 2.40 - Local File Inclusion Vulnerability8.1 High
- apustheme yoziWordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability8.1 High
- gavias oxpitanWordPress Oxpitan theme <= 1.3.5 - Local File Inclusion Vulnerability8.1 High
- thememove healsoulWordPress Healsoul theme <= 2.2.3 - Local File Inclusion Vulnerability8.1 High
- gavias winnexWordPress Winnex theme <= 1.3.2 - Local File Inclusion Vulnerability8.1 High
- mikado-themes wilmër, qodeinteractive wilmer +1 moreWordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability8.1 High
- mikado-themes backpack travelerWordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability8.1 High
- nasatheme nasa coreWordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability8.1 High
- scripteo ads proWordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerability8.1 High
- svil4ok meta keywords & descriptionWordPress Meta Keywords & Description plugin <= 0.8 - Local File Inclusion Vulnerability7.5 High
- wpfable fable extraWordPress Fable Extra plugin <= 1.0.6 - Local File Inclusion Vulnerability9.8 Critical
- seur oficial oficialWordPress SEUR Oficial plugin <= 2.2.23 - Local File Inclusion Vulnerability8.1 High
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability8.1 High
- xylus themes wp smart importWordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability8.1 High
- miniorange wordpress social login and registerWordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability8.1 High
- miniorange discord integrationWordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability8.1 High
- goodlayers tourmasterWordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability8.1 High
- onespan vasco self-service portalLocal File Inclusion vulnerability in Vasco v3.14and before allows a remote attacker to obtain...6.5 Medium
- fantasticplugins sumo reward pointsWordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability8.3 High
- mojoomla wpamsWordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability9.8 Critical
- indie plugins whatsapp click to chat plugin for wordpressWordPress WhatsApp Click to Chat Plugin for WordPress plugin <= 2.2.12 - Local File Inclusion vulnerability7.5 High
- mikado-themes fotonWordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability8.1 High
- candid themes gripWordPress Grip theme <= 1.0.9 - Local File Inclusion vulnerability7.5 High
- crocoblock jetreviewsWordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability7.5 High
- pluginever product category slider for woocommerceWordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerability7.5 High
- bringthepixel bimber - viral magazine wordpress themeWordPress Bimber - Viral Magazine WordPress Theme theme <= 9.2.5 - Local File Inclusion vulnerability8.8 High
- nasatheme nasa coreWordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability7.5 High
- roninwp fat services bookingWordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability7.5 High
- estatik mortgage calculator estatik, mortgage calculator +1 moreWordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability7.5 High
- tggfref wp-recallWordPress WP-Recall <= 16.26.14 - Local File Inclusion Vulnerability7.5 High
- xylus themes xt event widget for social eventsWordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability7.5 High
- fullworks display eventbrite eventsWordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability7.5 High
- ruben garcia gamipressWordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability7.5 High
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability7.5 High
- publishpress authorsWordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability7.5 High
- ashan perera eventonWordPress EventON plugin <= 2.4.1 - Local File Inclusion Vulnerability7.5 High
- greg winiarski wpadvertsWordPress WPAdverts plugin <= 2.2.2 - Local File Inclusion Vulnerability7.5 High
- wp chill download monitorWordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability7.5 High
- thememove edumall - professional lms education center wordpress themeEdumall <= 4.2.4 - Unauthenticated Local File Inclusion8.1 High
- wpoperation arrivalWordPress Arrival theme <= 1.4.5 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…