CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- ancorathemes greenvilleWordPress Greenville theme <= 1.3.2 - Local File Inclusion vulnerability8.1 High
- themerex good homesWordPress Good Homes theme <= 1.3.13 - Local File Inclusion vulnerability8.1 High
- elated-themes gaspardWordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- wwbn avideoAVideo has an Unauthenticated Local File Inclusion in API locale (RCE possible with writable PHP)8.6 High
- uptime.kuma uptime kuma, louislam uptime-kuma +1 moreUptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)6.5 Medium
- themerex melaniaWordPress Melania theme <= 2.5.0 - Local File Inclusion vulnerability8.1 High
- thimpress builderpressWordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability9.8 Critical
- ovatheme tripgoWordPress Tripgo theme < 1.5.6 - Local File Inclusion vulnerability8.1 High
- smub photo gallery, sliders, proofing and themes – nextgen galleryPhoto Gallery, Sliders, Proofing and Themes – NextGEN Gallery <= 4.0.4 - Authenticated (Author+) Local File Inclusion8.8 High
- aapanelA lack of path validation in aaPanel v7.57.0 allows attackers to execute a local file inclusion ...7.5 High
- ldap-account-manager ldap account manager, ldapaccountmanager lam +1 moreLAM has Authenticated Local File Inclusion (LFI) in PDF export8.8 High
- themelexus medilazar coreWordPress Medilazar Core plugin < 1.4.7 - Local File Inclusion vulnerability7.5 High
- boldgrid client invoicing by sprout invoicesWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability7.2 High
- themetechmount boldmanWordPress Boldman theme <= 7.7 - Local File Inclusion vulnerability7.5 High
- creatives planet greenly theme addonsWordPress Greenly Theme Addons plugin < 8.2 - Local File Inclusion vulnerability7.5 High
- creatives planet greenlyWordPress Greenly theme <= 8.1 - Local File Inclusion vulnerability7.5 High
- magepeopleteam wpbookinglyWordPress WpBookingly plugin <= 1.2.9 - Local File Inclusion vulnerability7.5 High
- radiustheme medilink-coreWordPress Medilink-Core plugin < 2.0.7 - Local File Inclusion vulnerability7.5 High
- redqteam turbo managerWordPress Turbo Manager plugin < 4.0.8 - Local File Inclusion vulnerability7.5 High
- wellchoose iftop, organization portal system +1 moreWellChoose｜IFTOP - Local File Inclusion9.3 Critical
- axiomthemes little birdiesWordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability8.1 High
- themerex verseWordPress Verse theme <= 1.7.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes midiWordPress Midi theme <= 1.14 - Local File Inclusion vulnerability8.1 High
- ancorathemes notariusWordPress Notarius theme <= 1.9 - Local File Inclusion vulnerability8.1 High
- ancorathemes veilWordPress Veil theme <= 1.9 - Local File Inclusion vulnerability8.1 High
- ancorathemes andersonWordPress Anderson theme <= 1.4.2 - Local File Inclusion vulnerability8.1 High
- themerex dr.pattersonWordPress Dr.Patterson theme <= 1.3.2 - Local File Inclusion vulnerability8.1 High
- axiomthemes nirvanaWordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability8.1 High
- axiomthemes welldoneWordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability8.1 High
- axiomthemes smart seoWordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability8.1 High
- themerex muziconWordPress Muzicon theme <= 1.9.0 - Local File Inclusion vulnerability8.1 High
- themerex save lifeWordPress Save Life theme <= 1.2.13 - Local File Inclusion vulnerability8.1 High
- themerex artriumWordPress Artrium theme <= 1.0.14 - Local File Inclusion vulnerability8.1 High
- themerex wealthcoWordPress WealthCo theme <= 2.18 - Local File Inclusion vulnerability8.1 High
- themerex marcellWordPress Marcell theme <= 1.2.14 - Local File Inclusion vulnerability8.1 High
- themerex rexcoinWordPress RexCoin theme <= 1.2.6 - Local File Inclusion vulnerability8.1 High
- themerex ozistiWordPress Ozisti theme <= 1.1.10 - Local File Inclusion vulnerability8.1 High
- themerex sounderWordPress Sounder theme <= 1.3.11 - Local File Inclusion vulnerability8.1 High
- themerex coleoWordPress Coleo theme <= 1.1.7 - Local File Inclusion vulnerability8.1 High
- themerex gamezoneWordPress Gamezone theme <= 1.1.11 - Local File Inclusion vulnerability8.1 High
- themerex daiquiriWordPress Daiquiri theme <= 1.2.4 - Local File Inclusion vulnerability8.1 High
- themerex aqualotsWordPress Aqualots theme <= 1.1.6 - Local File Inclusion vulnerability8.1 High
- themerex filmaxWordPress Filmax theme <= 1.1.11 - Local File Inclusion vulnerability8.1 High
- themerex run granWordPress Run Gran theme <= 2.0 - Local File Inclusion vulnerability8.1 High
- themerex mahoganyWordPress Mahogany theme <= 2.9 - Local File Inclusion vulnerability8.1 High
- themerex bazingaWordPress Bazinga theme <= 1.1.9 - Local File Inclusion vulnerability8.1 High
- themerex windsorWordPress Windsor theme <= 2.5.0 - Local File Inclusion vulnerability8.1 High
- axiomthemes conquerorsWordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability8.1 High
- themerex vapesterWordPress Vapester theme <= 1.1.10 - Local File Inclusion vulnerability8.1 High
- themerex le truffeWordPress Le Truffe theme <= 1.1.7 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…