Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) — Vulnerability Class 1082

1082 vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-69057 WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability — Eldon 9.1AICriticalAI2026-01-22
CVE-2025-69049 WordPress Töbel theme <= 1.6 - Local File Inclusion vulnerability — Töbel 9.1AICriticalAI2026-01-22
CVE-2025-69050 WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability — Overworld 9.1AICriticalAI2026-01-22
CVE-2025-69047 WordPress MaxShop theme <= 3.6.20 - Local File Inclusion vulnerability — MaxShop 9.1AICriticalAI2026-01-22
CVE-2025-69044 WordPress Vango theme <= 1.3.3 - Local File Inclusion vulnerability — Vango 9.1AICriticalAI2026-01-22
CVE-2025-69046 WordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability — iRecco Core 9.1AICriticalAI2026-01-22
CVE-2025-69043 WordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability — Rashy 8.1 High2026-01-22
CVE-2025-69039 WordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability — Bailly 8.1 High2026-01-22
CVE-2025-69038 WordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability — Hyori 9.1AICriticalAI2026-01-22
CVE-2025-69041 WordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability — Dekoro 9.1AICriticalAI2026-01-22
CVE-2025-69040 WordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability — Bfres 8.1 High2026-01-22
CVE-2025-69042 WordPress Lindo theme <= 1.2.5 - Local File Inclusion vulnerability — Lindo 8.1 High2026-01-22
CVE-2025-69005 WordPress Search & Go theme <= 2.8 - Local File Inclusion vulnerability — Search & Go 9.1AICriticalAI2026-01-22
CVE-2025-69037 WordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability — Pippo 9.1AICriticalAI2026-01-22
CVE-2025-69004 WordPress Bajaar - Highly Customizable WooCommerce WordPress Theme theme <= 2.1.0 - Local File Inclusion vulnerability — Bajaar - Highly Customizable WooCommerce WordPress Theme 9.1AICriticalAI2026-01-22
CVE-2025-68913 WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability — Miion 9.1AICriticalAI2026-01-22
CVE-2025-68908 WordPress Barberry theme <= 2.9.9.87 - Local File Inclusion vulnerability — Barberry 8.1 High2026-01-22
CVE-2025-68905 WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability — JNews - Pay Writer 8.1AIHighAI2026-01-22
CVE-2025-68510 WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability — Photography 9.1AICriticalAI2026-01-22
CVE-2025-67957 WordPress Listivo Core plugin <= 2.3.77 - Local File Inclusion vulnerability — Listivo Core 8.8AIHighAI2026-01-22
CVE-2025-67955 WordPress MyHome Core plugin <= 4.1.0 - Local File Inclusion vulnerability — MyHome Core 7.5 High2026-01-22
CVE-2025-67946 WordPress AdForest theme <= 6.0.11 - Local File Inclusion vulnerability — AdForest 9.1AICriticalAI2026-01-22
CVE-2025-67941 WordPress The Aisle theme < 2.9.1 - Local File Inclusion vulnerability — The Aisle 8.8AIHighAI2026-01-22
CVE-2025-67940 WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability — Powerlift 9.1AICriticalAI2026-01-22
CVE-2025-67938 WordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability — Biagiotti 9.1AICriticalAI2026-01-22
CVE-2025-67616 WordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability — Mella 9.1AICriticalAI2026-01-22
CVE-2025-67615 WordPress Myour theme <= 1.5.1 - Local File Inclusion vulnerability — Myour 9.1AICriticalAI2026-01-22
CVE-2025-63017 WordPress WerkStatt plugin plugin <= 1.6.6 - Local File Inclusion vulnerability — WerkStatt Plugin 9.1AICriticalAI2026-01-22
CVE-2025-54003 WordPress Depot theme <= 1.16 - Local File Inclusion vulnerability — Depot 8.1 High2026-01-22
CVE-2025-49994 WordPress Athens theme <= 1.1.6 - Local File Inclusion vulnerability — Athens 8.1 High2026-01-22

Vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) represent 1082 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.