CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- snstheme samex - clean, minimal shop woocommerce wordpress themeWordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Local File Inclusion Vulnerability8.1 High
- fastw3b llc fw galleryWordPress FW Gallery plugin <= 8.0.0 - Local File Inclusion Vulnerability8.1 High
- goalthemes sofassWordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability8.1 High
- convoypanel panelConvey Panel Directory Traversal in LocaleController leading to Remote Code Execution10.0 Critical
- radiustheme classified listingWordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability7.5 High
- realmag777 huskyWordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability7.5 High
- loftocean cozystayWordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability8.1 High
- snstheme dskWordPress DSK theme < 2.4 - Local File Inclusion vulnerability8.1 High
- snstheme simenWordPress Simen theme <= 4.6 - Local File Inclusion Vulnerability8.1 High
- snstheme evonWordPress Evon theme <= 3.4 - Local File Inclusion Vulnerability8.1 High
- mojoomla wpgymWordPress WPGYM <= 65.0 - Local File Inclusion Vulnerability7.5 High
- mojoomla school managementWordPress School Management <= 93.0.0 - Local File Inclusion Vulnerability7.5 High
- thembay fanaWordPress Fana theme <= 1.1.28 - Local File Inclusion Vulnerability8.1 High
- thembay lasaWordPress Lasa theme <= 1.1 - Local File Inclusion Vulnerability8.1 High
- thembay besaWordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability8.1 High
- thembay ruzaWordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability8.1 High
- thembay nikaWordPress Nika theme <= 1.2.8 - Local File Inclusion Vulnerability8.1 High
- thembay zotaWordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability8.1 High
- thembay sapaWordPress Sapa theme <= 1.1.14 - Local File Inclusion Vulnerability8.1 High
- thembay haraWordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability8.1 High
- thembay maiaWordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability8.1 High
- thembay dizaWordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability8.1 High
- thembay aoraWordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability8.1 High
- bzotheme zagg - electronics & accessories woocommerce wordpress themeZagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion8.1 High
- loftocean tinysaltWordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability8.1 High
- bzotheme fitrushWordPress Fitrush <= 1.3.4 - Local File Inclusion Vulnerability8.1 High
- snstheme bodycenter - gym, fitness woocommerce wordpress themeWordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability8.1 High
- bzotheme craftxtoreWordPress CraftXtore theme <= 1.7 - Local File Inclusion Vulnerability8.1 High
- snstheme nitanWordPress Nitan theme <= 2.9 - Local File Inclusion Vulnerability8.1 High
- axiomthemes labWordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability8.1 High
- bzotheme petitoWordPress Petito theme < 1.6.6 - Local File Inclusion vulnerability8.1 High
- snstheme avazWordPress Avaz theme <= 2.8 - Local File Inclusion Vulnerability8.1 High
- bzotheme giftxtoreWordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability8.1 High
- snstheme valen - sport, fashion woocommerce wordpress themeWordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability8.1 High
- snstheme sns antonWordPress SNS Anton theme <= 4.1 - Local File Inclusion Vulnerability8.1 High
- gavias krowdWordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability8.1 High
- magentech revoWordPress Revo theme <= 4.0.26 - Local File Inclusion Vulnerability7.5 High
- wp event manager event managerWordPress WP Event Manager plugin <= 3.1.51 - Local File Inclusion Vulnerability8.1 High
- g5plus essential real estateWordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability8.1 High
- unfoldwp blogbyteWordPress Blogbyte theme <= 1.1.1 - Local File Inclusion Vulnerability8.1 High
- unfoldwp blogmineWordPress Blogmine theme <= 1.1.7 - Local File Inclusion Vulnerability8.1 High
- unfoldwp blogtyWordPress Blogty theme <= 1.0.11 - Local File Inclusion Vulnerability8.1 High
- unfoldwp blogpriseWordPress Blogprise theme <= 1.0.9 - Local File Inclusion Vulnerability8.1 High
- unfoldwp blogvyWordPress Blogvy theme <= 1.0.7 - Local File Inclusion Vulnerability8.1 High
- unfoldwp magtyWordPress Magty theme <= 1.0.6 - Local File Inclusion Vulnerability8.1 High
- unfoldwp magzeWordPress Magze theme <= 1.0.9 - Local File Inclusion Vulnerability8.1 High
- unfoldwp magwaysWordPress Magways theme <= 1.2.1 - Local File Inclusion Vulnerability8.1 High
- choicehomemortgage ai mortgage calculatorWordPress AI Mortgage Calculator <= 1.0.1 - Local File Inclusion Vulnerability7.5 High
- fahad mahmood external store for shopifyWordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability7.5 High
- ovatheme brwWordPress BRW plugin <= 1.8.6 - Local File Inclusion Vulnerability7.5 High
- Show moreLoading…