Skip to main content

CWE archive

CWE-98 CVEs

Programmatic archive

1,267 CVEs tagged with CWE-9865 Critical, 1,145 High, 55 Medium, 2 Low, 0 Unrated.

CVE-2026-28088

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Aqualots aqualots allows PHP Local File Inclusion…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28087

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Filmax filmax allows PHP Local File Inclusion.Thi…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28086

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Run Gran run-gran allows PHP Local File Inclusion…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28085

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Mahogany mahogany allows PHP Local File Inclusion…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28084

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bazinga bazinga allows PHP Local File Inclusion.T…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28081

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Windsor windsor allows PHP Local File Inclusion.T…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28079

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File In…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28077

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Vapester vapester allows PHP Local File Inclusion…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28069

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Le Truffe letruffe allows PHP Local File Inclusio…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28068

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Rhythmo rhythmo allows PHP Local File Inclusion.T…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28067

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bassein bassein allows PHP Local File Inclusion.T…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28066

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Legrand legrand allows PHP Local File Inclusion.T…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28065

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Eject eject allows PHP Local File Inclusion.This…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28064

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Edge Decor edge-decor allows PHP Local File Inclu…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28063

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Asia Garden asia-garden allows PHP Local File Inc…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28062

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Happy Baby happy-baby allows PHP Local File Inclu…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28061

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tiger Claw tiger-claw allows PHP Local File Inclu…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28060

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX S.King stephanie-king allows PHP Local File Inclu…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28059

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dermatology Clinic dermatology-clinic allows PHP…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28058

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dixon dixon allows PHP Local File Inclusion.This…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28057

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Mandala mandala allows PHP Local File Inclusion.T…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28056

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX MCKinney's Politics mckinney-politics allows PHP…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28055

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX M.Williamson williamson allows PHP Local File Inc…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28054

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Legal Stone legal-stone allows PHP Local File Inc…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9

CVE-2026-28053

Published Mar 5, 2026

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Miller christine-miller allows PHP Local File Inc…

CVSS 8.1 · High
evidence mentions
1
Buzz score
11.9
Showing 251-275 of 1,267 CVEsPage 11 of 51