CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- nootheme jobmonsterWordPress Jobmonster theme <= 4.8.2 - Local File Inclusion vulnerability7.5 High
- select-themes select coreWordPress Select Core plugin < 2.6 - Local File Inclusion vulnerability7.5 High
- mikado-themes wilmër, qodeinteractive wilmer +1 moreWordPress Wilmër theme < 3.5 - Local File Inclusion vulnerability8.8 High
- rockoaAn issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to...4.3 Medium
- wphocus my auctions allegroMy auctions allegro <= 3.6.32 - Unauthenticated Local File Inclusion via controller8.1 High
- dcatadmin dcat admindcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend...9.8 Critical
- matrixaddons easy invoiceWordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability6.6 Medium
- thinkphpThe read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24...9.8 Critical
- metz connect energy-controlling ewio2-m, energy-controlling ewio2-m-bm, ethernet-io ewio2-bm +3 more +5 moreUnauthenticated Local File Inclusion in php module9.8 Critical
- ikhodal category and product woocommerce tabsCategory and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion8.8 High
- privatebinPrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal5.8 Medium
- dbl technology (dbltek) goip-1DBLTek GoIP-1 vGHSFVT-1.1-67-5 Unauthenticated LFI8.7 High
- webair tquadra cmsA Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue...7.5 High
- edge-themes alloggio - hotel bookingWordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability8.1 High
- ido kobelkowsky simple paymentWordPress Simple Payment plugin <= 2.4.6 - Local File Inclusion vulnerability7.5 High
- elated-themes savoryWordPress Savory theme <= 2.5 - Local File Inclusion vulnerability8.1 High
- fuelthemes revolutionWordPress Revolution theme < 2.5.8 - Local File Inclusion vulnerability7.5 High
- elated-themes academistWordPress Academist theme < 1.3 - Local File Inclusion vulnerability8.1 High
- favethemes houzezWordPress Houzez theme < 4.2.0 - Local File Inclusion vulnerability8.1 High
- codexthemes thegem theme elements (for wpbakery)WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability8.1 High
- apustheme itokWordPress ITok theme <= 1.1.42 - Local File Inclusion vulnerability8.1 High
- apustheme famitaWordPress Famita theme <= 1.54 - Local File Inclusion vulnerability8.1 High
- wpclever wpc product options for woocommerceWordPress WPC Product Options for WooCommerce plugin <= 3.1.3 - Local File Inclusion vulnerability7.5 High
- premmerceWordPress Premmerce plugin <= 1.3.19 - Local File Inclusion vulnerability7.5 High
- alexander anycommentWordPress AnyComment plugin <= 0.3.6 - Local File Inclusion vulnerability7.5 High
- josh kohlbach woocommerce store toolkitWordPress WooCommerce Store Toolkit plugin <= 2.4.3 - Local File Inclusion vulnerability7.5 High
- josh kohlbach store exporterWordPress Store Exporter plugin <= 2.7.6 - Local File Inclusion vulnerability7.5 High
- kyle phillips favoritesWordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability7.5 High
- aguilatechnologies wp customer areaWordPress WP Customer Area plugin <= 8.3.5 - Local File Inclusion vulnerability7.5 High
- thimpress learnpress export importWordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability7.5 High
- dedalx inhype - blog & magazine wordpress themeWordPress InHype - Blog & Magazine WordPress Theme theme <= 1.5.2 - Local File Inclusion vulnerability8.1 High
- dedalx saxon - viral content blog & magazine marketing wordpress themeWordPress Saxon - Viral Content Blog & Magazine Marketing WordPress Theme theme <= 1.9.3 - Local File Inclusion vulnerability8.1 High
- owenr88 simple contact formsWordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability8.1 High
- clearblue clearblue® ovulation calculatorWordPress Clearblue® Ovulation Calculator plugin <= 1.2.4 - Local File Inclusion vulnerability7.5 High
- premmerce product search for woocommerceWordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability7.5 High
- premmerce user rolesWordPress Premmerce User Roles plugin <= 1.0.13 - Local File Inclusion vulnerability7.5 High
- premmerce wholesale pricing for woocommerceWordPress Premmerce Wholesale Pricing for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability7.5 High
- premmerce wishlist for woocommerceWordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.10 - Local File Inclusion vulnerability7.5 High
- hinnerk altenburg immocaster wordpress pluginWordPress Immocaster WordPress Plugin plugin <= 1.3.6 - Local File Inclusion vulnerability8.1 High
- polopag – pix automático para woocommerceWordPress PoloPag – Pix Automático para Woocommerce plugin <= 2.0.9 - Local File Inclusion vulnerability7.5 High
- processby lazy load optimizerWordPress Lazy Load Optimizer plugin <= 1.4.7 - Local File Inclusion vulnerability7.5 High
- processby responsive sidebarWordPress Responsive Sidebar plugin <= 1.2.2 - Local File Inclusion vulnerability7.5 High
- creatives planet leblixWordPress Leblix Theme <= 2.4 - Local File Inclusion Vulnerability8.1 High
- designervily greenifyWordPress Greenify theme <= 2.2 - Local File Inclusion vulnerability8.1 High
- zozothemes zegenWordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability7.5 High
- daman jeet real time validation for gravity formsWordPress Real Time Validation for Gravity Forms <= 1.7.0 - Local File Inclusion Vulnerability7.5 High
- bslthemes kinsleyWordPress Kinsley theme <= 3.4.4 - Local File Inclusion vulnerability8.1 High
- pantherius modal surveyWordPress Modal Survey plugin <= 2.0.2.0.1 - Local File Inclusion vulnerability8.1 High
- mikado-themes dør, qodeinteractive dor +1 moreWordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability8.1 High
- select-themes dessauWordPress Dessau theme < 1.9 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…