Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) — Vulnerability Class 1082

1082 vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-64363 WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability — Kleo 9.1 -2025-10-31
CVE-2025-64360 WordPress Consulting Elementor Widgets plugin <= 1.4.2 - Local File Inclusion vulnerability — Consulting Elementor Widgets 7.5 High2025-10-31
CVE-2025-64359 WordPress Consulting theme < 6.7.5 - Local File Inclusion vulnerability — Consulting 7.5 High2025-10-31
CVE-2024-14002 Nagios XI < 2024R1.1.4 Authenticated Local File Inclusion via NagVis — XI 6.5AIMediumAI2025-10-30
CVE-2025-64284 WordPress Majestic Support plugin <= 1.0.7 - Local File Inclusion vulnerability — Majestic Support 8.8AIHighAI2025-10-29
CVE-2025-64216 WordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability — SmartMag 9.1AICriticalAI2025-10-29
CVE-2025-64195 WordPress Eduma theme <= 5.7.6 - Local File Inclusion vulnerability — Eduma 9.1AICriticalAI2025-10-29
CVE-2025-62868 WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability — Edge CPT 8.1 High2025-10-24
CVE-2025-62054 WordPress Houzez Theme - Functionality plugin <= 4.1.8 - Local File Inclusion vulnerability — Houzez Theme - Functionality 9.8AICriticalAI2025-10-22
CVE-2025-62029 WordPress Grevo theme <= 2.4 - Local File Inclusion vulnerability — Grevo 9.1AICriticalAI2025-10-22
CVE-2025-59558 WordPress Billey Theme < 2.1.6 - Local File Inclusion Vulnerability — Billey 9.1AICriticalAI2025-10-22
CVE-2025-59555 WordPress Medizin Theme < 1.9.7 - Local File Inclusion Vulnerability — Medizin 9.1AICriticalAI2025-10-22
CVE-2025-59564 WordPress EduMall Theme < 4.4.5 - Local File Inclusion Vulnerability — EduMall 9.1AICriticalAI2025-10-22
CVE-2025-59550 WordPress Xcare theme < 6.5 - Local File Inclusion vulnerability — Xcare 9.1AICriticalAI2025-10-22
CVE-2025-58967 WordPress Businext theme < 2.4.4 - Local File Inclusion vulnerability — Businext 8.1 High2025-10-22
CVE-2025-58958 WordPress SmilePure Theme < 1.8.5 - Local File Inclusion Vulnerability — SmilePure 8.1 High2025-10-22
CVE-2025-58955 WordPress Karzo theme < 2.6 - Local File Inclusion vulnerability — Karzo 9.1AICriticalAI2025-10-22
CVE-2025-49935 WordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerability — WoodMart 7.5 High2025-10-22
CVE-2025-49921 WordPress JetReviews plugin <= 3.0.0 - Local File Inclusion vulnerability — JetReviews 7.5 High2025-10-22
CVE-2025-48338 WordPress WP Abstracts plugin <= 2.7.4 - Local File Inclusion vulnerability — WP Abstracts 7.5 High2025-10-22
CVE-2025-32657 WordPress Testimonial Slider and Showcase Pro plugin <= 2.1.7 - Local File Inclusion vulnerability — Testimonial Slider And Showcase Pro 9.1AICriticalAI2025-10-22
CVE-2025-11722 Category and Products Accordion Panel <= 1.0 - Authenticated (Contributor+) Local File Inclusion — Woocommerce Category and Products Accordion Panel 7.5 High2025-10-15
CVE-2025-7634 WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion — WP Travel Engine – Tour Booking Plugin – Tour Operator Software 9.8 Critical2025-10-09
CVE-2025-7721 JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion — JoomSport – for Sports: Team & League, Football, Hockey & more 9.8 Critical2025-10-03
CVE-2025-9991 Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion — Tiny Bootstrap Elements Light 8.1 High2025-09-30
CVE-2025-9993 Bei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusion — Bei Fen – WordPress Backup Plugin 8.1 High2025-09-30
CVE-2025-60153 WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability — Subscribe To Unlock 7.5 High2025-09-26
CVE-2025-60150 WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability — Subscribe to Download 7.5 High2025-09-26
CVE-2025-60126 WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability — Testimonial Slider 8.8 High2025-09-26
CVE-2025-58973 WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability — Easy Elementor Addons 7.5 High2025-09-22

Vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) represent 1082 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.