Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) — Vulnerability Class 1082

1082 vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-46468 WordPress Fable Extra plugin <= 1.0.6 - Local File Inclusion Vulnerability — Fable Extra 9.8 Critical2025-05-23
CVE-2025-47453 WordPress WP Smart Import plugin <= 1.1.3 - Local File Inclusion Vulnerability — WP Smart Import 8.1 High2025-05-23
CVE-2025-47438 WordPress WP Job Portal plugin <= 2.3.1 - Local File Inclusion vulnerability — WP Job Portal 9.1AICriticalAI2025-05-23
CVE-2025-47670 WordPress Social Login and Register plugin <= 7.6.10 - Local File Inclusion Vulnerability — WordPress Social Login and Register 8.1 High2025-05-23
CVE-2025-47672 WordPress miniOrange Discord Integration plugin <= 2.2.2 - Local File Inclusion Vulnerability — miniOrange Discord Integration 8.1 High2025-05-23
CVE-2025-48292 WordPress Tourmaster plugin <= 5.3.8 - Local File Inclusion vulnerability — Tourmaster 8.1 High2025-05-23
CVE-2025-32925 WordPress SUMO Reward Points plugin <= 30.7.0 - Local File Inclusion vulnerability — SUMO Reward Points 8.3 High2025-05-19
CVE-2025-39406 WordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerability — WPAMS 9.8 Critical2025-05-19
CVE-2025-39411 WordPress WhatsApp Click to Chat Plugin for WordPress plugin <= 2.2.12 - Local File Inclusion vulnerability — WhatsApp Click to Chat Plugin for WordPress 7.5 High2025-05-19
CVE-2025-39458 WordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability — Foton 8.1 High2025-05-19
CVE-2025-26735 WordPress Grip theme <= 1.0.9 - Local File Inclusion vulnerability — Grip 7.5 High2025-05-19
CVE-2025-39396 WordPress JetReviews plugin <= 2.3.6 - Local File Inclusion vulnerability — JetReviews 7.5 High2025-05-19
CVE-2025-39364 WordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerability — Product Category Slider for WooCommerce 7.5 High2025-05-19
CVE-2025-47576 WordPress Bimber - Viral Magazine WordPress Theme theme <= 9.2.5 - Local File Inclusion vulnerability — Bimber - Viral Magazine WordPress Theme 8.8 High2025-05-19
CVE-2025-39507 WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability — Nasa Core 7.5 High2025-05-16
CVE-2025-47693 WordPress Fat Services Booking plugin <= 5.5 - Local File Inclusion vulnerability — FAT Services Booking 7.5 High2025-05-16
CVE-2025-48136 WordPress Mortgage Calculator Estatik plugin <= 2.0.12 - Local File Inclusion Vulnerability — Mortgage Calculator Estatik 7.5 High2025-05-16
CVE-2025-47653 WordPress WP-Recall plugin <= 16.26.14 - Local File Inclusion Vulnerability — WP-Recall 7.5 High2025-05-07
CVE-2025-47531 WordPress XT Event Widget for Social Events plugin <= 1.1.7 - Local File Inclusion Vulnerability — XT Event Widget for Social Events 7.5 High2025-05-07
CVE-2025-47510 WordPress Display Eventbrite Events plugin < 6.3 - Local File Inclusion Vulnerability — Display Eventbrite Events 7.5 High2025-05-07
CVE-2025-47508 WordPress GamiPress plugin <= 7.3.7 - Local File Inclusion Vulnerability — GamiPress 7.5 High2025-05-07
CVE-2025-47498 WordPress Hotel Booking plugin <= 3.6 - Local File Inclusion Vulnerability — Hotel Booking 7.5 High2025-05-07
CVE-2025-47496 WordPress PublishPress Authors plugin <= 4.7.5 - Local File Inclusion Vulnerability — PublishPress Authors 7.5 High2025-05-07
CVE-2025-47494 WordPress EventON plugin <= 2.4.1 - Local File Inclusion Vulnerability — EventON 7.5 High2025-05-07
CVE-2025-47440 WordPress WPAdverts plugin <= 2.2.2 - Local File Inclusion Vulnerability — WPAdverts 7.5 High2025-05-07
CVE-2025-47439 WordPress Download Monitor plugin <= 5.0.22 - Local File Inclusion Vulnerability — Download Monitor 7.5 High2025-05-07
CVE-2025-2101 Edumall <= 4.2.4 - Unauthenticated Local File Inclusion — EduMall - Professional LMS Education Center WordPress Theme 8.1 High2025-04-26
CVE-2025-39359 WordPress CWW Portfolio theme <= 1.3.1 - Local File Inclusion vulnerability — CWW Portfolio 7.5 High2025-04-24
CVE-2025-32921 WordPress Arrival theme <= 1.4.5 - Local File Inclusion vulnerability — Arrival 7.5 High2025-04-24
CVE-2025-39360 WordPress Grace Mag theme <= 1.1.5 - Local File Inclusion vulnerability — Grace Mag 7.5 High2025-04-24

Vulnerabilities classified as CWE-98 (PHP程序中Include/Require语句包含文件控制不恰当(PHP远程文件包含)) represent 1082 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.