CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- averta premium portfolio features for phlox themePremium Portfolio Features for Phlox theme <= 2.3.10 - Unauthenticated Local File Inclusion via args[extra_template_path]8.1 High
- impacttechlab elegance menuElegance Menu <= 1.9 - Authenticated (Contributor+) Local File Inclusion7.5 High
- whyun wpcom memberWPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode8.8 High
- stylemixthemes masterstudyWordPress Masterstudy theme < 4.8.126 - Local File Inclusion vulnerability7.5 High
- seventhqueen kleoWordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability7.5 High
- stylemixthemes consulting elementor widgetsWordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability7.5 High
- stylemixthemes consultingWordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability7.5 High
- nagios xiNagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis7.1 High
- majestic support supportWordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability7.5 High
- themesphere smartmagWordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability7.5 High
- thimpress edumaWordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability7.5 High
- edge-themes edge cptWordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability8.1 High
- arksigner software and hardware inc. acbakimzalaLocal File Inclusion in ArkSigner's AcBakImzala9.8 Critical
- favethemes houzez theme - functionalityWordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability7.5 High
- themesion grevoWordPress Grevo theme <= 2.4 - Local File Inclusion vulnerability8.1 High
- thememove edumallWordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability8.1 High
- thememove billeyWordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability8.1 High
- thememove medizinWordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability8.1 High
- designervily xcareWordPress Xcare theme < 6.5 - Local File Inclusion vulnerability8.1 High
- thememove businextWordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability8.1 High
- thememove smilepureWordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability8.1 High
- designervily karzoWordPress Karzo theme < 2.6 - Local File Inclusion vulnerability8.1 High
- xtemos woodmartWordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability7.5 High
- crocoblock jetreviewsWordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability7.5 High
- kevon adonis wp abstractsWordPress WP Abstracts plugin <= 2.7.4 - Local File Inclusion vulnerability7.5 High
- radiustheme testimonial slider and showcase proWordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability7.5 High
- ikhodal woocommerce category and products accordion panelCategory and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion7.5 High
- wptravelengine wp travel engine – tour booking plugin – tour operator softwareWP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion9.8 Critical
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion9.8 Critical
- migli tiny bootstrap elements lightTiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion8.1 High
- d3rd4v1d bei fen – wordpress backup pluginBei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusion8.1 High
- wpshuffle subscribe to unlockWordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability7.5 High
- wpshuffle subscribe to downloadWordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability7.5 High
- pickplugins testimonial sliderWordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability8.8 High
- hashthemes easy elementor addonsWordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability7.5 High
- pencidesign soledadWordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability7.5 High
- pluginwale easy pricing table wpWordPress Easy Pricing Table WP Plugin <= 1.1.3 - Local File Inclusion Vulnerability7.5 High
- immonex kickstart teamWordPress immonex Kickstart Team Plugin <= 1.6.9 - Local File Inclusion Vulnerability7.5 High
- catchthemes catch dark modeCatch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion7.5 High
- talemy spirit frameworkSpirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion7.5 High
- webcodingplace ultimate classified listingsUltimate Classified Listings <= 1.6 - Authenticated (Contributor+) Local File Inclusion7.5 High
- gavias zistonWordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability8.1 High
- uxper salaWordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability8.1 High
- highwarden super store finderWordPress Super Store Finder plugin < 7.8 - Local File Inclusion vulnerability7.5 High
- solwin blog designer proWordPress Blog Designer PRO plugin <= 3.4.7 - Authenticated Non-Arbitrary Local File Inclusion vulnerability7.5 High
- thememove maxcoachWordPress MaxCoach Theme <= 3.2.5 - Local File Inclusion Vulnerability8.1 High
- gavias indutriWordPress Indutri Theme < 1.3.0 - Local File Inclusion Vulnerability8.1 High
- realmag777 inpost galleryWordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion Vulnerability7.5 High
- smackcoders wordpress helpdesk integrationWordPress Helpdesk Integration <= 5.8.10 - Unauthenticated Local File Inclusion8.1 High
- immonex kickstartWordPress immonex Kickstart Plugin <= 1.11.6 - Local File Inclusion Vulnerability7.5 High
- Show moreLoading…