CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- thembay zotaWordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability7.5 High
- pavothemes bookoryWordPress Bookory theme <= 2.2.7 - Local File Inclusion vulnerability7.5 High
- cmsimpleCMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution8.6 High
- thembay nikaWordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability7.5 High
- thembay dizaWordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability7.5 High
- codexthemes thegem theme elements (for elementor)WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerability7.5 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreA Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra...8.8 High
- smub photo gallery, sliders, proofing and themes – nextgen galleryPhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 3.59.12 - Authenticated (Contributor+) Local File Inclusion via 'template'8.8 High
- cridiostudio listingproWordPress ListingPro theme < 2.9.10 - Local File Inclusion vulnerability8.1 High
- hclsoftware travelerWordPress Traveler theme < 3.2.6 - Local File Inclusion vulnerability8.1 High
- pencidesign pennewsWordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability8.1 High
- tielabs jannahWordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability8.1 High
- 8theme xstoreWordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability7.5 High
- ancorathemes insetWordPress Inset theme <= 1.18.0 - Local File Inclusion Vulnerability8.1 High
- agence web eoxia - montpellier task managerWordPress Task Manager plugin <= 3.0.2 - Local File Inclusion vulnerability7.5 High
- jbhovik ray enterprise translationWordPress Ray Enterprise Translation plugin <= 1.7.1 - Local File Inclusion vulnerability7.5 High
- processby anchor smooth scrollWordPress Anchor smooth scroll plugin <= 1.0.2 - Local File Inclusion vulnerability8.1 High
- don-themes riodeWordPress Riode | Multi-Purpose WooCommerce theme <= 1.6.23 - Local File Inclusion vulnerability8.1 High
- thememove minimogwpWordPress MinimogWP theme <= 3.9.6 - Local File Inclusion vulnerability8.1 High
- axiomthemes giardinoWordPress Giardino theme <= 1.1.10 - Local File Inclusion vulnerability8.1 High
- axiomthemes katelynWordPress Katelyn theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- axiomthemes pinevaleWordPress Pinevale theme <= 1.0.14 - Local File Inclusion vulnerability8.1 High
- axiomthemes renewalWordPress Renewal theme <= 1.2.2 - Local File Inclusion vulnerability8.1 High
- axiomthemes rosalindaWordPress Rosalinda theme <= 1.2.3 - Local File Inclusion vulnerability8.1 High
- axiomthemes kickerWordPress Kicker theme <= 2.2.0 - Local File Inclusion vulnerability8.1 High
- axiomthemes pubzinneWordPress Pubzinne theme <= 1.0.12 - Local File Inclusion vulnerability8.1 High
- axiomthemes smart seo, smartseo +1 moreWordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability8.1 High
- ancorathemes detailxWordPress DetailX theme <= 1.10.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes dj rainflowWordPress DJ Rainflow theme <= 1.3.13 - Local File Inclusion vulnerability8.1 High
- ancorathemes wingerWordPress Winger theme <= 1.0.16 - Local File Inclusion vulnerability8.1 High
- ancorathemes fabricaWordPress Fabrica theme <= 1.8.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes onleashWordPress OnLeash theme <= 1.5.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes maxcubeWordPress MaxCube theme <= 1.3.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes w&dWordPress W&D theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes rare radioWordPress Rare Radio theme <= 1.0.15.1 - Local File Inclusion vulnerability8.1 High
- axiomthemes pandaWordPress Panda theme <= 1.21 - Local File Inclusion vulnerability8.1 High
- axiomthemes soleilWordPress Soleil theme <= 1.17 - Local File Inclusion vulnerability8.1 High
- axiomthemes tripsterWordPress Tripster theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- axiomthemes ipharmWordPress IPharm theme <= 1.2.3 - Local File Inclusion vulnerability8.1 High
- axiomthemes heartstarWordPress HeartStar theme <= 1.0.14 - Local File Inclusion vulnerability8.1 High
- ancorathemes fribboWordPress Fribbo theme <= 1.1.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes wandericWordPress Wanderic theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- ancorathemes chinchillaWordPress Chinchilla theme <= 1.16 - Local File Inclusion vulnerability8.1 High
- axiomthemes lioneWordPress Lione theme <= 1.16 - Local File Inclusion vulnerability8.1 High
- axiomthemes spockWordPress Spock theme <= 1.17 - Local File Inclusion vulnerability8.1 High
- axiomthemes aromaticaWordPress Aromatica theme <= 1.8 - Local File Inclusion vulnerability8.1 High
- axiomthemes athosWordPress Athos theme <= 1.9 - Local File Inclusion vulnerability8.1 High
- axiomthemes vocalWordPress Vocal theme <= 1.12 - Local File Inclusion vulnerability8.1 High
- axiomthemes ecogrowWordPress EcoGrow theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- axiomthemes manufactoryWordPress Manufactory theme <= 1.4 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…