CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- select-themes prowessWordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability7.5 High
- qantumthemes kentha elementor widgetsWordPress Kentha Elementor Widgets plugin < 3.1 - Local File Inclusion vulnerability7.5 High
- softwebmedia gyan elementsWordPress Gyan Elements plugin <= 2.2.1 - Local File Inclusion vulnerability7.5 High
- uxper goloWordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability7.5 High
- wphocus my auctions allegroWordPress My auctions allegro plugin <= 3.6.33 - Local File Inclusion vulnerability7.5 High
- pavothemes triplyWordPress Triply theme <= 2.4.7 - Local File Inclusion vulnerability7.5 High
- pavothemes freshioWordPress Freshio theme <= 2.4.2 - Local File Inclusion vulnerability7.5 High
- fuelthemes werkstattWordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability8.1 High
- fuelthemes northWordPress North theme <= 5.7.5 - Local File Inclusion vulnerability8.1 High
- ancorathemes maltaWordPress Malta theme <= 1.3.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes hoboWordPress Hobo theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- ancorathemes modern housewifeWordPress Modern Housewife theme <= 1.0.12 - Local File Inclusion vulnerability8.1 High
- ancorathemes yoloxWordPress Yolox theme <= 1.0.15 - Local File Inclusion vulnerability8.1 High
- ancorathemes pearson specterWordPress Pearson Specter theme <= 1.11.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes piqesWordPress Piqes theme <= 1.0.11 - Local File Inclusion vulnerability8.1 High
- ancorathemes priderWordPress Prider theme <= 1.1.3.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes tantumWordPress TanTum theme <= 1.1.13 - Local File Inclusion vulnerability8.1 High
- ancorathemes tornadosWordPress Tornados theme <= 2.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes mujiWordPress Muji theme <= 1.2.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes tailsWordPress Tails theme <= 1.4.12 - Local File Inclusion vulnerability8.1 High
- ancorathemes indoor plantsWordPress Indoor Plants theme <= 1.2.7 - Local File Inclusion vulnerability8.1 High
- ancorathemes snow mountainWordPress Snow Mountain theme <= 1.4.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes pets landWordPress Pets Land theme <= 1.2.8 - Local File Inclusion vulnerability8.1 High
- ancorathemes weedlesWordPress Weedles theme <= 1.1.12 - Local File Inclusion vulnerability8.1 High
- ancorathemes movemeWordPress MoveMe theme <= 1.2.15 - Local File Inclusion vulnerability8.1 High
- ancorathemes ureachWordPress uReach theme <= 1.3.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes diveitWordPress DiveIt theme <= 1.4.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes partymakerWordPress PartyMaker theme <= 1.1.15 - Local File Inclusion vulnerability8.1 High
- edge-themes eldonWordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- edge-themes overworldWordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- elated-themes töbelWordPress Töbel theme <= 1.6 - Local File Inclusion vulnerability8.1 High
- magentech maxshopWordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability8.1 High
- webgeniuslab irecco coreWordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability8.1 High
- goalthemes vangoWordPress Vango theme <= 1.3.3 - Local File Inclusion vulnerability8.1 High
- goalthemes rashyWordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability8.1 High
- goalthemes lindoWordPress Lindo theme <= 1.2.5 - Local File Inclusion vulnerability8.1 High
- goalthemes dekoroWordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability8.1 High
- goalthemes bfresWordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability8.1 High
- goalthemes baillyWordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability8.1 High
- goalthemes hyoriWordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability8.1 High
- goalthemes pippoWordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability8.1 High
- elated-themes search & goWordPress Search & Go theme <= 2.8 - Local File Inclusion vulnerability8.1 High
- xpeedstudio bajaar - highly customizable woocommerce wordpress themeWordPress Bajaar - Highly Customizable WooCommerce WordPress Theme theme <= 2.1.0 - Local File Inclusion vulnerability8.1 High
- zozothemes miionWordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability7.5 High
- temash barberryWordPress Barberry theme <= 2.9.9.87 - Local File Inclusion vulnerability8.1 High
- jegtheme jnews - pay writerWordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability7.5 High
- themegoods photographyWordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability8.1 High
- tangiblewp listivo coreWordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability8.1 High
- tangiblewp myhome coreWordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability7.5 High
- scriptsbundle adforestWordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…