CWE-98: Remote file include
The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.
Also known as Improper Control of Filename for Include/Require Statement in PHP Program, RFI, Local file inclusion.
A kind of CWE-829 Inclusion of Functionality from Untrusted Control Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- vlthemes leedoWordPress Leedo theme <= 3.0.0 - Local File Inclusion vulnerability7.5 High
- themelexus kitchorWordPress Kitchor theme <= 1.4.3 - Local File Inclusion vulnerability7.5 High
- uxper golo frameworkWordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability7.5 High
- elated-themes flowWordPress Flow theme <= 1.8 - Local File Inclusion vulnerability7.5 High
- mikado-themes dørWordPress Dør theme <= 2.4.1 - Local File Inclusion vulnerability7.5 High
- thememove brookWordPress Brook theme <= 2.9.0 - Local File Inclusion vulnerability7.5 High
- thememove billeyWordPress Billey theme <= 2.1.8 - Local File Inclusion vulnerability7.5 High
- jetbrains aquaWordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerability7.5 High
- edge-themes aaltoWordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability7.5 High
- stmcan rt-theme 18 | extensionsWordPress RT-Theme 18 | Extensions plugin <= 2.5 - Local File Inclusion vulnerability8.1 High
- sourcecodester online book store systemSourceCodester Online Book Store System Administrative index.php php file inclusion5.3 Medium
- choijun la-studio element kit for elementor, la-studio element kit for elementor +1 moreLA-Studio Element Kit for Elementor <= 1.6.1 - Authenticated (Contributor+) Local File Inclusion via 'progress_type' Widget Setting7.5 High
- happyforms – form builder for wordpress: drag & drop contact forms, surveys, payments & multipurpose formsHappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion6.6 Medium
- getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsellWPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter6.6 Medium
- phpipamPHPIPAM Authenticated LFI2.3 Low
- rometheme rtmkitRTMKit <= 2.0.7 - Authenticated (Contributor+) Limited Local File Inclusion via 'template' Parameter4.3 Medium
- themeboy sportspress proWordPress SportsPress Pro plugin <= 2.7.29 - Local File Inclusion vulnerability7.5 High
- shopify help center shopifyWordPress Shopify plugin <= 1.0.0 - Local File Inclusion vulnerability7.5 High
- elated-themes audreyWordPress Audrey theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- stylemixthemes pearl - corporate businessWordPress Pearl - Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability8.1 High
- goodlayers tourmasterWordPress Tourmaster plugin <= 5.4.5 - Local File Inclusion vulnerability7.5 High
- ancorathemes lighthouseWordPress Lighthouse theme <= 1.2.12 - Local File Inclusion vulnerability8.1 High
- emarket-design video gallery – youtube gallery, playlist & video gridVideo Gallery <= 4.0.3 - Authenticated (Subscriber+) Arbitrary Function Call via 'path' Parameter7.5 High
- bplugins panorama viewer – 360 degree image + video viewerWordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability7.5 High
- everthemess goya coreWordPress Goya Core plugin < 1.0.9.4 - Local File Inclusion vulnerability7.5 High
- stylemixthemes splash - sport club wordpress theme for basketball, football, hockeyWordPress Splash - Sport Club WordPress theme for Basketball, Football, Hockey theme <= 4.4.3 - Local File Inclusion vulnerability7.5 High
- pluginus.net mdtfWordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability8.1 High
- joomtech easy shopJoomla! Component Easy Shop 1.2.3 Local File Inclusion6.9 Medium
- betterdocs proBetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style9.8 Critical
- cakephpCakePHP: View::element() is missing a path containment check6.3 Medium
- stylemixthemes motorsWordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability8.1 High
- thememove atomlabWordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerability8.1 High
- codesupplyco uppercaseWordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability8.1 High
- elated-themes solene coreWordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability8.1 High
- themerex line agencyWordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability8.1 High
- themerex etudeWordPress Etude theme <= 1.6 - Local File Inclusion vulnerability8.1 High
- themerex eventicityWordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- themerex gunslingerWordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- themerex skywardWordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability8.1 High
- themerex granolaWordPress Granola theme <= 1.13 - Local File Inclusion vulnerability8.1 High
- themerex gamicWordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability8.1 High
- themerex preservationWordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability8.1 High
- themerex fortiusWordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability8.1 High
- themerex snow clubWordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability8.1 High
- themerex dazzleWordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability8.1 High
- themerex luxmed | medicine & healthcare doctor wordpress themeWordPress LuxMed | Medicine & Healthcare Doctor WordPress Theme theme <= 1.2.2 - Local File Inclusion vulnerability8.1 High
- themerex imbaWordPress Imba theme <= 1.5.0 - Local File Inclusion vulnerability8.1 High
- mikado-themes chapteroneWordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- bdthemes element pack proWordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability7.5 High
- xtemos hitekWordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…