CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- untheme organicfoodWordPress OrganicFood theme <= 3.6.4 - Local File Inclusion vulnerability7.5 High
- apustheme homeoWordPress Homeo theme <= 1.2.59 - Local File Inclusion vulnerability7.5 High
- apustheme freeioWordPress Freeio theme <= 1.3.21 - Local File Inclusion vulnerability7.5 High
- creatives planet emphiresWordPress Emphires theme <= 3.9 - Local File Inclusion vulnerability7.5 High
- kutethemes biolifeWordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability7.5 High
- kutethemes boutiqueWordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability7.5 High
- kutethemes kuteshopWordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability7.5 High
- themestek labtechcoWordPress LabtechCO theme <= 8.3 - Local File Inclusion vulnerability7.5 High
- mikado-themes mikado coreWordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability7.5 High
- emlogEmlog: Local File Inclusion in plugin.php via unsanitized plugin parameter6.5 Medium
- heidisqlHeidiSQL 9.5.0.5196 Denial of Service via Preferences6.9 Medium
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Core Discloses Sensitive Data via Authenticated Local File Inclusion in selectobject.php6.5 Medium
- nk visual portfolio, photo gallery & post gridWordPress Visual Portfolio, Photo Gallery & Post Grid plugin <= 3.5.1 - Local File Inclusion vulnerability7.5 High
- gavias kuncoWordPress Kunco theme < 1.4.5 - Local File Inclusion vulnerability8.1 High
- creativews kiddyWordPress Kiddy theme <= 2.0.8 - Local File Inclusion vulnerability8.1 High
- creativews vintwoodWordPress VintWood theme <= 1.1.8 - Local File Inclusion vulnerability8.1 High
- creativews trendustryWordPress Trendustry theme <= 1.1.4 - Local File Inclusion vulnerability8.1 High
- creativews metamaxWordPress MetaMax theme <= 1.1.4 - Local File Inclusion vulnerability8.1 High
- mikado-themes rosebudWordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability8.1 High
- mikado-themes destonWordPress Deston theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- mikado-themes amfissaWordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability8.1 High
- mikado-themes emaurriWordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability8.1 High
- mikado-themes multiofficeWordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- mikado-themes luxedriveWordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- mikado-themes belfortWordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- elated-themes the aisle coreWordPress The Aisle Core plugin <= 2.0.5 - Local File Inclusion vulnerability8.1 High
- mikado-themes curly coreWordPress Curly Core plugin <= 2.1.6 - Local File Inclusion vulnerability8.1 High
- tielabs jannahWordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerability8.1 High
- select-themes momentsWordPress Moments theme <= 2.2 - Local File Inclusion vulnerability8.1 High
- select-themes mixtapeWordPress Mixtape theme <= 2.1 - Local File Inclusion vulnerability8.1 High
- jwsthemes idealautoWordPress IdealAuto theme < 3.8.6 - Local File Inclusion vulnerability8.1 High
- jwsthemes lovedateWordPress LoveDate theme < 3.8.6 - Local File Inclusion vulnerability8.1 High
- jwsthemes feedyWordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerability8.1 High
- jwsthemes streamvidWordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability8.1 High
- stmcan naturalife extensionsWordPress NaturaLife Extensions plugin <= 2.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes wizor'sWordPress Wizor's theme <= 2.12 - Local File Inclusion vulnerability8.1 High
- ancorathemes vegadaysWordPress VegaDays theme <= 1.2.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes unicaWordPress Unica theme <= 1.4.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes triompherWordPress Triompher theme <= 1.1.0 - Local File Inclusion vulnerability8.1 High
- elated-themes roisinWordPress Roisin theme <= 1.2.1 - Local File Inclusion vulnerability8.1 High
- elated-themes neobeatWordPress NeoBeat theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- elated-themes gioiaWordPress Gioia theme <= 1.4 - Local File Inclusion vulnerability8.1 High
- ancorathemes dentaluxWordPress Dentalux theme <= 3.3 - Local File Inclusion vulnerability8.1 High
- elated-themes amoliWordPress Amoli theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- themerex prolinguaWordPress ProLingua theme <= 1.1.12 - Local File Inclusion vulnerability8.1 High
- themerex nelsonWordPress Nelson theme <= 1.2.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes mr. cobblerWordPress Mr. Cobbler theme <= 1.1.9 - Local File Inclusion vulnerability8.1 High
- elated-themes lellaWordPress Lella theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- elated-themes laurentWordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability8.1 High
- ancorathemes hypnotherapyWordPress Hypnotherapy theme <= 1.2.10 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…