CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- thimpress wp pipesWordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability8.1 High
- themeatelier idonateproWordPress IDonatePro <= 2.1.9 - Local File Inclusion Vulnerability8.1 High
- stmcan rt-theme 18 | extensionsWordPress RT-Theme 18 | Extensions plugin <= 2.4 - Local File Inclusion Vulnerability7.5 High
- publishpress gutenberg blocksWordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability7.5 High
- cyberhobo geo mashupWordPress Geo Mashup plugin <= 1.13.16 - Local File Inclusion vulnerability9.8 Critical
- octagonwebstudio premium addons for kingcomposerWordPress Premium Addons for KingComposer Plugin <= 1.1.1 - Local File Inclusion Vulnerability8.1 High
- cloud infrastructure services saml sso - single sign on loginWordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability7.5 High
- gravitywp - merge tagsWordPress GravityWP - Merge Tags <= 1.4.4 - Local File Inclusion Vulnerability7.5 High
- acato wp rest cacheWordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability7.5 High
- webcodingplace responsive posts carousel proWordPress Responsive Posts Carousel WordPress Plugin Plugin <= 15.0 - Local File Inclusion Vulnerability7.5 High
- realmag777 gmap targetingWordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion Vulnerability8.8 High
- eyecix jobsearchWordPress JobSearch Plugin < 3.0.8 - Local File Inclusion Vulnerability7.5 High
- wellchoose organization portal systemWellChoose｜Organization Portal System - Local File Inclusion9.3 Critical
- vedo suite project suiteA local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote...6.5 Medium
- advanced custom fields wordpress pluginWordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion10.0 Critical
- hogash kallyas - creative ecommerce multi-purpose wordpress themeKallyas <= 4.21.0 - Authenticated (Contributor+) Local File Inclusion7.5 High
- librenmsLibreNMS has Authenticated Local File Inclusion in ajax_form.php that Allows RCE7.5 High
dolibarr/dolibarrPackagistDolibarr has Remote Code Execution Vulnerability (Bypass)8.8 High- nokia wavesuite nocAccess to local file system and its content9.0 Critical
- markjaquith subscribe to commentsSubscribe to Comments <= 2.1.2 - Local File Includion7.2 High
- ht plugins contact form 7WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability6.6 Medium
- xtemos woodmartWoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion8.8 High
- radiustheme widget for google reviewsWidget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion8.8 High
- lcweb privatecontent - mail actionsWordPress PrivateContent - Mail Actions plugin <= 2.3.2 - Local File Inclusion vulnerability7.5 High
- apuswp kossy - minimalist ecommerce wordpress themeWordPress Kossy - Minimalist eCommerce WordPress Theme <= 1.45 - Local File Inclusion Vulnerability8.1 High
- nasatheme elessiWordPress Elessi < 6.4.1 - Local File Inclusion Vulnerability7.5 High
- cmsmasters content composerWordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerability8.1 High
- scripteo ads pro plugin - multi-purpose wordpress advertising manager, ads pro +1 moreAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion8.1 High
- scripteo ads pro plugin - multi-purpose wordpress advertising manager, ads pro +1 moreAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code Execution9.8 Critical
- devnex addons for elementorWordPress Devnex Addons For Elementor plugin <= 1.0.9 - Local File Inclusion Vulnerability7.5 High
- wpbean wpb category slider for woocommerceWordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability7.5 High
- nicdark hotel bookingWordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability7.5 High
- serhii pasyuk gmedia photo galleryWordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability7.5 High
- bzotheme zennyWordPress Zenny theme <= 1.7.5 - Local File Inclusion Vulnerability8.1 High
- snstheme mbstore - digital woocommerce wordpress themeWordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability8.1 High
- bzotheme printxtoreWordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability8.1 High
- snstheme sns vickyWordPress SNS Vicky theme <= 3.7 - Local File Inclusion Vulnerability8.1 High
- serpednet serped.netWordPress SERPed.net plugin <= 4.6 - Local File Inclusion Vulnerability8.1 High
- thembay pucaWordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability8.1 High
- case-themes ctusersWordPress CTUsers plugin <= 1.0.0 - Local File Inclusion Vulnerability7.5 High
- thembay greenmartWordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability8.1 High
- webgeniuslab zikzag coreWordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability8.1 High
- codesupplyco networkerWordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability8.1 High
- thembay dizaWordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability8.1 High
- real-web realtyeliteWordPress RealtyElite theme <= 1.0.0 - Local File Inclusion Vulnerability8.1 High
- john russell national weather service alertsWordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability8.1 High
- apuswp domnooWordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability8.1 High
- ancorathemes citygovWordPress CityGov theme <= 1.9 - Local File Inclusion Vulnerability8.1 High
- ovatheme brwWordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability8.1 High
- themehunk zitaWordPress Zita theme <= 1.6.5 - Local File Inclusion Vulnerability8.1 High
- Show moreLoading…