CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- elated-themes malmöWordPress Malmö theme <= 2.2 - Local File Inclusion vulnerability8.1 High
- mikado-themes mikado coreWordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability8.1 High
- themerex ecoblueWordPress EcoBlue theme <= 1.15 - Local File Inclusion vulnerability8.1 High
- themerex autopartsWordPress AutoParts theme <= 1.5.8 - Local File Inclusion vulnerability8.1 High
- themeum right wayWordPress Right Way theme <= 4.0 - Local File Inclusion vulnerability8.1 High
- axiomthemes reprizoWordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability8.1 High
- axiomthemes promoWordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability8.1 High
- themerex tipsyWordPress Tipsy theme <= 1.1 - Local File Inclusion vulnerability8.1 High
- themerex resursWordPress Resurs theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- themerex orpheusWordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- themerex snowyWordPress Snowy theme <= 1.13 - Local File Inclusion vulnerability8.1 High
- themerex quirkyWordPress Quirky theme <= 1.23 - Local File Inclusion vulnerability8.1 High
- themerex gatWordPress Gat theme <= 1.16 - Local File Inclusion vulnerability8.1 High
- themerex ingeniosoWordPress Ingenioso theme <= 1.14.0 - Local File Inclusion vulnerability8.1 High
- themerex airsupplyWordPress AirSupply theme <= 2.0.0 - Local File Inclusion vulnerability8.1 High
- themerex homerooferWordPress HomeRoofer theme <= 2.11.0 - Local File Inclusion vulnerability8.1 High
- themerex jolyWordPress Joly theme <= 1.22.0 - Local File Inclusion vulnerability8.1 High
- themerex neuronetWordPress Neuronet theme < 1.14.0 - Local File Inclusion vulnerability8.1 High
- aa-team premium age verification / restriction for wordpressWordPress Premium Age Verification / Restriction for WordPress Plugin <= 3.0.2 - Arbitrary File Download Vulnerability7.5 High
- elated-themes mr. seoWordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerability8.1 High
- elated-themes aperitifWordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- select-themes getawayWordPress Getaway theme < 1.8 - Local File Inclusion vulnerability8.1 High
- elated-themes soleneWordPress Solene theme <= 3.4 - Local File Inclusion vulnerability8.1 High
- webgeniuslab softlab coreWordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability8.1 High
- webgeniuslab integrio coreWordPress Integrio Core plugin < 1.2.8 - Local File Inclusion vulnerability8.1 High
- webgeniuslab thegov coreWordPress Thegov Core plugin < 2.0.23 - Local File Inclusion vulnerability8.1 High
- cactusthemes truemagWordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerability8.1 High
- themelogi roneousWordPress Roneous theme <= 2.1.5 - Local File Inclusion vulnerability8.1 High
- themerex itacticsWordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- themerex spikeWordPress Spike theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- themerex erosWordPress Eros theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- themerex choreoWordPress Choreo theme <= 1.6 - Local File Inclusion vulnerability8.1 High
- themerex wineshopWordPress WineShop theme <= 3.17 - Local File Inclusion vulnerability8.1 High
- themerex greckoWordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability8.1 High
- themerex gitaWordPress Gita theme <= 1.11 - Local File Inclusion vulnerability8.1 High
- themerex printoWordPress Printo theme <= 1.11 - Local File Inclusion vulnerability8.1 High
- themerex medeusWordPress Medeus theme <= 1.14 - Local File Inclusion vulnerability8.1 High
- themerex top dogWordPress Top Dog theme <= 1.0.5 - Local File Inclusion vulnerability8.1 High
- themerex putterWordPress Putter theme <= 1.17 - Local File Inclusion vulnerability8.1 High
- phpgt domWordPress Dom theme <= 1.24 - Local File Inclusion vulnerability8.1 High
- themerex missionWordPress Mission theme <= 1.22 - Local File Inclusion vulnerability8.1 High
- themerex abelleWordPress Abelle theme <= 1.22 - Local File Inclusion vulnerability8.1 High
- themerex kelly youngWordPress Kelly Young theme <= 1.1.0 - Local File Inclusion vulnerability8.1 High
- themelogi waniumWordPress Wanium theme <= 1.9.8 - Local File Inclusion vulnerability8.1 High
- themerex food dropWordPress Food Drop theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- themerex especioWordPress Especio theme <= 1.0 - Local File Inclusion vulnerability8.1 High
- themerex deliciosaWordPress Deliciosa theme <= 1.10.0 - Local File Inclusion vulnerability8.1 High
- themerex corbesierWordPress Corbesier theme <= 1.15.0 - Local File Inclusion vulnerability8.1 High
- themerex copypressWordPress CopyPress theme <= 1.4.5 - Local File Inclusion vulnerability8.1 High
- themerex ionaWordPress Iona theme <= 1.0.8 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…