Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) — Vulnerability Class 1082

1082 vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-53339 WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Local File Inclusion Vulnerability — Devnex Addons For Elementor 7.5 High2025-06-27
CVE-2025-53281 WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability — WPB Category Slider for WooCommerce 7.5 High2025-06-27
CVE-2025-53259 WordPress Hotel Booking plugin <= 3.7 - Local File Inclusion Vulnerability — Hotel Booking 7.5 High2025-06-27
CVE-2025-53257 WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability — Gmedia Photo Gallery 7.5 High2025-06-27
CVE-2025-24769 WordPress Zenny theme <= 1.7.5 - Local File Inclusion Vulnerability — Zenny 8.1 High2025-06-27
CVE-2025-28946 WordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability — PrintXtore 8.1 High2025-06-27
CVE-2025-28947 WordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability — MBStore - Digital WooCommerce WordPress Theme 8.1 High2025-06-27
CVE-2025-28990 WordPress SNS Vicky theme <= 3.7 - Local File Inclusion Vulnerability — SNS Vicky 8.1 High2025-06-27
CVE-2025-28998 WordPress SERPed.net plugin <= 4.6 - Local File Inclusion Vulnerability — SERPed.net 8.1 High2025-06-27
CVE-2025-30992 WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability — Puca 8.1 High2025-06-27
CVE-2025-32298 WordPress CTUsers plugin <= 1.0.0 - Local File Inclusion Vulnerability — CTUsers 7.5 High2025-06-27
CVE-2025-49883 WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability — Greenmart 8.1 High2025-06-27
CVE-2025-49886 WordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability — Zikzag Core 8.1 High2025-06-27
CVE-2025-52723 WordPress Networker theme <= 1.2.0 - Local File Inclusion Vulnerability — Networker 8.1 High2025-06-27
CVE-2025-52729 WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability — Diza 8.1 High2025-06-27
CVE-2025-52808 WordPress RealtyElite theme <= 1.0.0 - Local File Inclusion Vulnerability — RealtyElite 8.1 High2025-06-27
CVE-2025-52809 WordPress National Weather Service Alerts plugin <= 1.3.5 - Local File Inclusion Vulnerability — National Weather Service Alerts 8.1 High2025-06-27
CVE-2025-52812 WordPress Domnoo theme <= 1.49 - Local File Inclusion Vulnerability — Domnoo 8.1 High2025-06-27
CVE-2025-52814 WordPress BRW plugin <= 1.8.8 - Local File Inclusion Vulnerability — BRW 8.1 High2025-06-27
CVE-2025-52816 WordPress Zita theme <= 1.6.5 - Local File Inclusion Vulnerability — Zita 8.1 High2025-06-27
CVE-2025-52815 WordPress CityGov theme <= 1.9 - Local File Inclusion Vulnerability — CityGov 8.1 High2025-06-27
CVE-2023-25998 WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Local File Inclusion Vulnerability — Samex - Clean, Minimal Shop WooCommerce WordPress Theme 8.1 High2025-06-27
CVE-2025-24760 WordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability — Sofass 8.1 High2025-06-27
CVE-2025-49416 WordPress FW Gallery plugin <= 8.0.0 - Local File Inclusion Vulnerability — FW Gallery 8.1 High2025-06-27
CVE-2025-52715 WordPress Classified Listing plugin <= 4.2.0 - Local File Inclusion Vulnerability — Classified Listing 7.5 High2025-06-20
CVE-2025-52708 WordPress HUSKY plugin <= 1.3.7 - Local File Inclusion Vulnerability — HUSKY 7.5 High2025-06-20
CVE-2025-49508 WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability — CozyStay 8.1 High2025-06-17
CVE-2025-24761 WordPress DSK theme < 2.4 - Local File Inclusion vulnerability — DSK 8.1 High2025-06-17
CVE-2025-28991 WordPress Evon theme <= 3.4 - Local File Inclusion Vulnerability — Evon 8.1 High2025-06-17
CVE-2025-29002 WordPress Simen theme <= 4.6 - Local File Inclusion Vulnerability — Simen 8.1 High2025-06-17

Vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) represent 1082 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.