CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- elated-themes the aisleWordPress The Aisle theme < 2.9.1 - Local File Inclusion vulnerability8.1 High
- mikado-themes powerliftWordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability8.1 High
- mikado-themes biagiottiWordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability8.1 High
- bzotheme mellaWordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability8.1 High
- bslthemes myourWordPress Myour theme <= 1.5.1 - Local File Inclusion vulnerability8.1 High
- fuelthemes werkstatt pluginWordPress WerkStatt plugin plugin <= 1.6.6 - Local File Inclusion vulnerability7.5 High
- mikado-themes depotWordPress Depot theme <= 1.16 - Local File Inclusion vulnerability8.1 High
- axiomthemes amuliWordPress Amuli theme <= 2.3.0 - Local File Inclusion vulnerability8.1 High
- ovatheme athensWordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability8.1 High
- ninetheme anarkaliWordPress Anarkali theme <= 1.0.9 - Local File Inclusion vulnerability8.1 High
- vaghasia3 news and blog designer bundleNews and Blog Designer Bundle <= 1.1 - Unauthenticated Local File Inclusion9.8 Critical
- mpdfmPDF 7.0 - Local File Inclusion8.7 High
- g5theme handmade frameworkWordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability7.5 High
- mikado-themes hendonWordPress Hendon theme < 1.7 - Local File Inclusion vulnerability8.1 High
- mikado-themes curlyWordPress Curly theme < 3.3 - Local File Inclusion vulnerability8.1 High
- mikado-themes optimizeWordPress Optimize theme < 2.4 - Local File Inclusion vulnerability8.1 High
- mikado-themes wellspringWordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability8.1 High
- zozothemes corpkitWordPress Corpkit theme <= 2.0 - Local File Inclusion vulnerability7.5 High
- elated-themes neo ocularWordPress Neo Ocular theme < 1.2 - Local File Inclusion vulnerability8.1 High
- qantumthemes typifyWordPress Typify theme <= 3.0.2 - Local File Inclusion vulnerability8.1 High
- thememove mitechWordPress Mitech theme <= 2.3.4 - Local File Inclusion vulnerability8.1 High
- thememove moodyWordPress Moody theme <= 2.7.3 - Local File Inclusion vulnerability8.1 High
- tmrw-studio atlasWordPress Atlas theme <= 2.1.0 - Local File Inclusion vulnerability8.1 High
- themelogi navianWordPress Navian theme <= 1.5.4 - Local File Inclusion vulnerability8.1 High
- thememove brookWordPress Brook - Agency Business Creative theme <= 2.9.0 - Local File Inclusion vulnerability8.1 High
- thememove aerolandWordPress AeroLand theme <= 1.6.6 - Local File Inclusion vulnerability8.1 High
- brandexponents oshineWordPress Oshine theme < 7.3.0 - Local File Inclusion vulnerability8.1 High
- jwsthemes ochahouseWordPress OchaHouse theme <= 2.2.8 - Local File Inclusion vulnerability8.1 High
- magentech rozy - flower shopWordPress Rozy - Flower Shop theme <= 1.2.25 - Local File Inclusion vulnerability8.1 High
- janstudio geckoWordPress Gecko theme <= 1.9.8 - Local File Inclusion vulnerability8.1 High
- themerex hopeWordPress Hope theme <= 3.0.0 - Local File Inclusion vulnerability8.1 High
- mojoomla wpchurchWordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerability8.1 High
- elated-themes frappe, frappé +1 moreWordPress Frappé theme <= 1.8 - Local File Inclusion vulnerability8.1 High
- codexthemes thegem theme elements (for elementor)WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerability7.5 High
- vankarwai calafateWordPress Calafate theme <= 1.7.7 - Local File Inclusion vulnerability7.5 High
- jwsthemes issabellaWordPress Issabella theme <= 1.1.2 - Local File Inclusion vulnerability8.1 High
- jwsthemes freeagentWordPress FreeAgent theme <= 2.1.2 - Local File Inclusion vulnerability8.1 High
- madrasthemes mas videosWordPress MAS Videos plugin <= 1.3.4 - Local File Inclusion vulnerability7.5 High
- mikado-themes lekkerWordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability8.1 High
- webcodingplace responsive posts carousel proWordPress Responsive Posts Carousel Pro plugin <= 15.1 - Local File Inclusion vulnerability7.5 High
- edge-themes cineramaWordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability7.5 High
- thembay aoraWordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability7.5 High
- thembay pucaWordPress Puca theme <= 2.6.39 - Local File Inclusion vulnerability7.5 High
- thembay greenmartWordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerability7.5 High
- miniorange wordpress social login and registerWordPress WordPress Social Login and Register plugin <= 7.7.0 - Local File Inclusion vulnerability6.6 Medium
- redim gmbh cookiehint wpWordPress CookieHint WP plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- cedcommerce integration for good marketWordPress CedCommerce Integration for Good Market plugin <= 1.0.6 - Local File Inclusion vulnerability7.5 High
- nawawi jamili docket cacheWordPress Docket Cache plugin <= 24.07.03 - Local File Inclusion vulnerability8.1 High
- wp shuffle subscribe to unlock liteWordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion vulnerability7.5 High
- thembay fanaWordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…