Skip to main content

CWE archive

CWE-98 CVEs

Programmatic archive

1,267 CVEs tagged with CWE-9865 Critical, 1,145 High, 55 Medium, 2 Low, 0 Unrated.

CVE-2025-39584

Published Apr 16, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics Eventin wp-event-solution allows PHP Local File…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2025-39570

Published Apr 16, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Lomu WPCOM Member wpcom-member allows PHP Local File Inclu…

CVSS 8.8 · High

CVE-2025-27011

Published Apr 15, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magepeopleteam Booking and Rental Manager booking-and-rent…

CVSS 7.5 · High

CVE-2025-26894

Published Apr 15, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mobeen Abdullah Coming Soon, Maintenance Mode site-mode al…

CVSS 7.5 · High

CVE-2025-26889

Published Apr 15, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hockeydata hockeydata LOS hockeydata-los allows PHP Local…

CVSS 7.5 · High

CVE-2025-32672

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in g5theme Ultimate Bootstrap Elements for Elementor ultimate…

CVSS 8.1 · High

CVE-2025-32663

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in roninwp FAT Cooming Soon fat-coming-soon allows PHP Local…

CVSS 8.1 · High

CVE-2025-32656

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Testimonial Slider And Showcase Pro testimonia…

CVSS 8.1 · High

CVE-2025-32654

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Stylemix Motors motors-car-dealership-classified-listings…

CVSS 8.1 · High

CVE-2025-32627

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JoomSky JS Job Manager js-jobs allows PHP Local File Inclu…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort

CVE-2025-32614

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File In…

CVSS 8.8 · High

CVE-2025-32589

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in odude Flexi – Guest Submit flexi allows PHP Local File Inc…

CVSS 8.1 · High

CVE-2025-32577

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hakeemnala Build App Online build-app-online allows PHP Lo…

CVSS 9.8 · Critical

CVE-2025-32519

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Foysal Imran IDonate idonate allows PHP Local File Inclusi…

CVSS 8.1 · High
Vendor/product tagsBeta · best-effort

CVE-2025-31040

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Exthemes WP Food ordering and Restaurant Menu wp-food allo…

CVSS 8.1 · High

CVE-2025-31015

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Adrian Tobey WordPress SMTP Service, Email Delivery Solved…

CVSS 7.5 · High

CVE-2025-31014

Published Apr 11, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hossein Material Dashboard material-dashboard allows PHP L…

CVSS 7.5 · High

CVE-2025-22279

Published Apr 10, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Crocoblock JetCompareWishlist jet-compare-wishlist allows…

CVSS 7.5 · High

CVE-2025-32668

Published Apr 10, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allow…

CVSS 8.1 · High

CVE-2025-32160

Published Apr 10, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashan Perera EventON eventon-lite.This issue affects Event…

CVSS 7.5 · High

CVE-2025-32158

Published Apr 10, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Syed Balkhi aThemes Addons for Elementor athemes-addons-fo…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2025-32692

Published Apr 9, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Shuffle WP Subscription Forms wp-subscription-forms all…

CVSS 7.5 · High

CVE-2025-32499

Published Apr 9, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpWax Logo Showcase Ultimate logo-showcase-ultimate allows…

CVSS 6.5 · Medium

CVE-2025-32159

Published Apr 4, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in RadiusTheme Radius Blocks radius-blocks allows PHP Local F…

CVSS 7.5 · High

CVE-2025-32157

Published Apr 4, 2025

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Jakub Glos Sparkle Elementor Kit sparkle-elementor-kit all…

CVSS 7.5 · High
Showing 1,026-1,050 of 1,267 CVEsPage 42 of 51