CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- bzotheme monkiWordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability8.1 High
- axiomthemes plan my dayWordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability8.1 High
- ancorathemes childhopeWordPress ChildHope theme <= 1.1.8 - Local File Inclusion vulnerability8.1 High
- ancorathemes easyeatWordPress EasyEat theme <= 1.9.0 - Local File Inclusion vulnerability9.8 Critical
- ancorathemes echoWordPress Echo theme <= 1.15.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes emberlynWordPress Emberlyn theme <= 1.3.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes ettaWordPress Etta theme <= 1.14.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes exit gameWordPress Exit Game theme <= 1.4.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes faith & hopeWordPress Faith & Hope theme <= 2.13.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes farm agricoWordPress Farm Agrico theme <= 1.3.11 - Local File Inclusion vulnerability8.1 High
- ancorathemes femmeWordPress Femme theme <= 1.3.11 - Local File Inclusion vulnerability8.1 High
- ancorathemes gardisWordPress Gardis theme <= 1.2.13 - Local File Inclusion vulnerability8.1 High
- ancorathemes glamchicWordPress GlamChic theme <= 1.0.11 - Local File Inclusion vulnerability8.1 High
- ancorathemes struxWordPress Strux theme <= 1.9 - Local File Inclusion vulnerability8.1 High
- ancorathemes lymcoinWordPress Lymcoin theme <= 1.3.12 - Local File Inclusion vulnerability8.1 High
- ancorathemes lettuceWordPress Lettuce theme <= 1.1.7 - Local File Inclusion vulnerability8.1 High
- ancorathemes palladioWordPress Palladio theme <= 1.1.10 - Local File Inclusion vulnerability8.1 High
- ancorathemes monyxiWordPress Monyxi theme <= 1.1.8 - Local File Inclusion vulnerability8.1 High
- ancorathemes hananiWordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability8.1 High
- ancorathemes jack wellWordPress Jack Well theme <= 1.0.14 - Local File Inclusion vulnerability8.1 High
- ancorathemes ludos paradiseWordPress Ludos Paradise theme <= 2.1.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes kings & queensWordPress Kings & Queens theme <= 1.1.16 - Local File Inclusion vulnerability8.1 High
- ancorathemes graciozaWordPress Gracioza theme <= 1.0.15 - Local File Inclusion vulnerability8.1 High
- ancorathemes mamitaWordPress Mamita theme <= 1.0.9 - Local File Inclusion vulnerability8.1 High
- ancorathemes militarologyWordPress Militarology theme <= 1.0.15 - Local File Inclusion vulnerability8.1 High
- ancorathemes shieldgroupWordPress ShieldGroup theme <= 2.13 - Local File Inclusion vulnerability8.1 High
- select-themes stockholmWordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability7.5 High
- select-themes stockholm coreWordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerability7.5 High
- pencidesign soledadWordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability7.5 High
- liquidthemes hub coreWordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerability7.5 High
- thememove minimogwpWordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability7.5 High
- thememove edumallWordPress EduMall theme <= 4.4.7 - Local File Inclusion vulnerability7.5 High
- nenad-obradovic extensive vc addons for wpbakery page builderExtensive VC Addons for WPBakery page builder <= 1.9.1 - Unauthenticated Local File Inclusion via 'shortcode_name' Parameter8.1 High
- cvedovini lt unleashedLT Unleashed <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion via 'template' Parameter7.5 High
- flarum friendsofflarum pretty mailFoF Pretty Mail 1.1.2 Local File Inclusion via Email Template Settings6.9 Medium
- dream-theme the7 elementsWordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability7.5 High
- dream-theme the7WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability7.5 High
- andondesign udesign coreWordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability7.5 High
- dfdevelopment ronneby theme coreWordPress Ronneby Theme Core plugin <= 1.5.68 - Local File Inclusion vulnerability7.5 High
- fuelthemes north - required pluginWordPress North - Required Plugin plugin <= 1.4.2 - Local File Inclusion vulnerability7.5 High
- thembay haraWordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability7.5 High
- tripples turitorWordPress Turitor theme < 1.5.3 - Local File Inclusion vulnerability7.5 High
- thembay besaWordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability7.5 High
- opal wp fashionWordPress Fashion theme < 5.3.0 - Local File Inclusion vulnerability7.5 High
- thembay urnaWordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability7.5 High
- tripples digiqoleWordPress Digiqole theme < 2.2.7 - Local File Inclusion vulnerability7.5 High
- thimpress sailingWordPress Sailing theme < 4.4.6 - Local File Inclusion vulnerability7.5 High
- opal wp ekommartWordPress ekommart theme < 4.3.1 - Local File Inclusion vulnerability7.5 High
- nootheme jobmonster elementor addonWordPress Jobmonster Elementor Addon plugin <= 1.1.4 - Local File Inclusion vulnerability7.5 High
- tripples exhibzWordPress Exhibz theme <= 3.0.9 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…