CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- buddydev mediapressWordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability7.5 High
- solwin blog designer proWordPress Blog Designer PRO plugin <= 3.4.7 - Unauthenticated Non-Arbitrary Local File Inclusion vulnerability8.1 High
- ovatheme irecaWordPress Ireca Theme <= 1.8.5 - Local File Inclusion Vulnerability8.1 High
- gavias kipsoWordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability8.1 High
- ovatheme eventsWordPress Ovatheme Events Plugin <= 1.2.8 - Local File Inclusion Vulnerability8.1 High
- tielabs jannahWordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability8.1 High
- assaf parag poll, survey & quiz maker plugin by opinion stageWordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage Plugin <= 19.11.0 - Local File Inclusion Vulnerability7.5 High
- codeyatri gutenifyWordPress Gutenify Plugin <= 1.5.4 - Local File Inclusion Vulnerability7.5 High
- unfoldwp magazineWordPress Magazine Theme <= 1.2.2 - Local File Inclusion Vulnerability8.1 High
- wpinterface blogmarksWordPress BlogMarks Theme <= 1.0.8 - Local File Inclusion Vulnerability8.1 High
- unfoldwp magazine eliteWordPress Magazine Elite Theme <= 1.2.4 - Local File Inclusion Vulnerability8.1 High
- unfoldwp magazine sagaWordPress Magazine Saga Theme <= 1.2.7 - Local File Inclusion Vulnerability8.1 High
- themeuniver glamerWordPress Glamer Theme <= 1.0.2 - Local File Inclusion Vulnerability8.1 High
- favethemes houzezWordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability4.3 Medium
- cocobasic neresaWordPress Neresa Theme <= 1.3 - Local File Inclusion Vulnerability8.1 High
- dourou cookie warningWordPress Cookie Warning plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability7.5 High
- dahz kitringWordPress Kitring Theme <= 2.8 - Local File Inclusion Vulnerability8.1 High
- max chirkov simple login logWordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability8.1 High
- cocobasic anotteWordPress Anotte theme <= 1.8 - Local File Inclusion vulnerability8.1 High
- edge-themes edge cptWordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability8.1 High
- uxper bookingWordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability8.1 High
- uxper nussWordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability8.1 High
- dedalx cook&mealWordPress Cook&Meal <= 1.2.3 - Local File Inclusion Vulnerability8.1 High
- michele giorgi formalityWordPress Formality <= 1.5.9 - Local File Inclusion Vulnerability8.1 High
- cocobasic calirisWordPress Caliris <= 1.5 - Local File Inclusion Vulnerability8.1 High
- thembay cena storeWordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability8.1 High
- roxnor fundengineWordPress FundEngine Plugin <= 1.7.4 - Local File Inclusion Vulnerability7.5 High
- benjamin denis seopress for mainwpWordPress SEOPress for MainWP <= 1.4 - Local File Inclusion Vulnerability7.5 High
- favethemes houzezWordPress Houzez theme <= 4.0.4 - Local File Inclusion Vulnerability8.1 High
- ovatheme eventlistWordPress eventlist plugin <= 1.9.2 - Local File Inclusion Vulnerability8.1 High
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.9.0 - Local File Inclusion Vulnerability8.1 High
- bdthemes zoloblocksWordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability7.5 High
- nk ghost kitWordPress Ghost Kit <= 3.4.1 - Local File Inclusion Vulnerability8.1 High
- radiustheme widget for google reviewsWordPress Widget for Google Reviews <= 1.0.15 - Local File Inclusion Vulnerability8.1 High
- cozmoslabs paid member subscriptionsWordPress Paid Member Subscriptions <= 2.15.4 - Local File Inclusion Vulnerability7.5 High
- saleswonder team tobias cf7 wow stylerWordPress CF7 WOW Styler Plugin <= 1.7.2 - Local File Inclusion Vulnerability7.5 High
- schiocco support boardWordPress Support Board <= 3.8.0 - Local File Inclusion Vulnerability8.1 High
- tribulant software newslettersWordPress Newsletters plugin <= 4.10 - Local File Inclusion vulnerability7.5 High
- aman funnel builder by funnelkitWordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability7.5 High
- pencidesign soledadSoledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'8.8 High
- delabon woocommerce blocks – woolookWoocommerce Blocks – Woolook <= 1.7.0 - Authenticated (Admin+) Local File Inclusion6.6 Medium
- setriosoft bizcalendar webBizCalendar Web <= 1.1.0.53 - Authenticated (Contributor+) Local File Inclusion7.5 High
- thememove unicampWordPress Unicamp Theme <= 2.6.3 - Local File Inclusion Vulnerability8.1 High
- thememove makeaholicWordPress Makeaholic Theme <= 1.8.4 - Local File Inclusion Vulnerability8.1 High
- themestek xinterioWordPress Xinterio Theme <= 4.2 - Local File Inclusion Vulnerability8.1 High
- thembay urnaWordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability8.1 High
- wipeoutmedia css & javascript toolboxWordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability7.5 High
- wproyal news magazine xWordPress News Magazine X <= 1.2.35 - Local File Inclusion Vulnerability7.5 High
- beeteam368 extensionsWordPress BeeTeam368 Extensions Plugin <= 1.9.4 - Local File Inclusion Vulnerability10.0 Critical
- beeteam368 vidmovWordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability8.1 High
- Show moreLoading…