File Inclusion

This page lists 185 vulnerabilities in this category.

Critical: 1 High: 177 Medium: 3 Low: 4

Vulnerability Name

CVE

CWE

Severity

WordPress Plugin WP-Client Lite::Client Portals, File Sharing, Messaging & Invoicing Local File Inclusion (1.1.1)

CVE-2014-2383

CWE-22

High

WordPress Plugin WP e-Commerce Shop Styling Local File Inclusion (2.9.1)

CVE-2014-2383

CWE-22

High

WordPress Plugin Backup by Supsystic Local File Inclusion (2.3.9)

-

CWE-22

High

WordPress Plugin Tutor LMS-eLearning and online course solution Local File Inclusion (1.8.7)

CVE-2021-24242

CWE-22

High

WordPress Plugin AceIDE Local File Inclusion (2.6.2)

CVE-2021-24549

CWE-22

High

WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Local File Inclusion (1.3.6.2)

CVE-2021-24566

CWE-98

High

WordPress Plugin Consulting Elementor Widgets Local File Inclusion (1.3.0)

CVE-2024-37089

CWE-22

High

WordPress Plugin wp-publications Local File Inclusion (0.0)

CVE-2021-38360

CWE-22

High

WordPress Plugin All-in-One Video Gallery Local File Inclusion (2.4.9)

CVE-2021-24970

CWE-22

High

WordPress Plugin Customer Reviews for WooCommerce Local File Inclusion (5.15.0)

CVE-2023-0080

CWE-22

High

WordPress Plugin Extensive VC Addons for WPBakery page builder Local File Inclusion (1.9)

CVE-2023-0159

CWE-22

High

WordPress Plugin YARPP-Yet Another Related Posts Local File Inclusion (5.30.3)

CVE-2022-45374

CWE-22

High

WordPress Plugin Dropbox Folder Share Local File Inclusion (1.9.7)

CVE-2023-4488

CWE-22

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.3)

CVE-2024-3136

CWE-22

High

WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.0)

CVE-2024-2411

CWE-22

High

WordPress Plugin Premmerce Permalink Manager for WooCommerce Local File Inclusion (2.3.10)

CVE-2024-27971

CWE-22

High

WordPress Plugin Subscribe to Comments Local File Inclusion (2.1.2)

-

CWE-22

High

WordPress Plugin N-Media Website Contact Form with File Upload Local File Inclusion (1.5)

-

CWE-22

High

WordPress Plugin Really Simple Guest Post Local File Inclusion (1.0.6)

-

CWE-22

High

Joomla! Core 3.x.x Local File Inclusion (3.0.0 - 3.9.25)

CVE-2021-26031

CWE-22

High

Drupal Core 6.x Local File Inclusion (6.0 - 6.9)

-

CWE-22

High

Joomla! Core 1.0 Remote File Inclusion (1.0.0)

CVE-2006-2960

CWE-94

High

Joomla! Core 1.0.x Remote File Inclusion (1.0.11 - 1.0.14)

CVE-2008-5671

CWE-94

High

Joomla! Core 2.5.x Remote File Inclusion (2.5.4 - 2.5.25)

CVE-2014-7228

CWE-94

High

Joomla! Core 3.3.x Remote File Inclusion (3.3.0 - 3.3.4)

CVE-2014-7228

CWE-94

High

Joomla! Core 3.x.x Remote File Inclusion (3.0.0 - 3.2.5)

CVE-2014-7228

CWE-94

High

Joomla! Core Local File Inclusion (2.5.0 - 3.8.8)

CVE-2018-12712

CWE-22

High

WordPress Plugin myGallery Remote File Include (1.4b4)

CVE-2007-2426

CWE-94

High

Drupal Core 5.x Local File Inclusion (5.0 - 5.15)

-

CWE-22

High

WordPress Plugin myFlash Remote File Include (1.10)

CVE-2007-2485

CWE-94

High

WordPress Plugin Ruben Boelinger wordTube 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)

CVE-2007-2482

CWE-94

High

WordPress Plugin Ruben Boelinger WP-Table 'wpPATH' Parameter Multiple Remote File Include Vulnerabilities (1.43)

CVE-2007-2484

CWE-94

High

WordPress Plugin BackUpWordPress Remote File Inclusion (0.4.2b)

CVE-2007-5800

CWE-94

High

WordPress Plugin PictPress 'resize.php' Multiple Local File Include Vulnerabilities (1.0)

CVE-2007-6369

CWE-22

High

WordPress Plugin WP-Lytebox 'pg' Parameter Local File Inclusion (1.3)

CVE-2009-4672

CWE-22

High

Zabbix 1.8.x-2.2.x Local File Inclusion via XXE Attack

-

CWE-611

High

WordPress Plugin FireStats 'firestats-wordpress.php' Remote File Include (1.6.1)

CVE-2009-2143

CWE-94

High

Drupal Core 5.x Local File Inclusion (5.0 - 5.11)

CVE-2008-6171

CWE-22

High

ZK Framework AuUploader Information Disclosure (CVE-2022-36537)

CVE-2022-36537

CWE-200

High

WordPress Plugin jQuery Mega Menu Widget 'skin' Parameter Local File Include (1.0)

-

CWE-22

High

Laravel log viewer local file download (LFD)

CVE-2018-8947

CWE-22

High

Apache Axis2 xsd local file inclusion

-

CWE-22

High

Joomla! core remote file inclusion

CVE-2014-7228.xml

CWE-98

High

TCPDF arbitrary file read

-

CWE-98

High

Umbraco CMS local file inclusion

-

CWE-98

High

WordPress plugin Slider Revolution arbitrary file disclosure

-

CWE-200

High

Zend Framework local file disclosure via XXE injection

CVE-2015-5161

CWE-611

High

webadmin.php script

-

CWE-552

High

Remote File Inclusion (admin/lang.php) (CMS Made Simple)

CVE-2005-2846

-

High

ACME mini_httpd arbitrary file read

CVE-2018-18778

CWE-23

High

Metabase RCE (CVE-2023-38646)

CVE-2023-38646

CWE-20

High

SAP B2B/B2C CRM Local File Inclusion

-

CWE-22

High

Typo3 Restler 1.7.0 Local File Disclosure

-

CWE-22

High

vBulletin routestring Local File Inclusion

-

CWE-98

High

Odoo LFI (CVE-2019-14322)

CVE-2019-14322

CWE-22

High

Unauthenticated Arbitrary File Read vulnerability in VMware vCenter

-

CWE-22

High

SearchBlox Local File Inclusion (CVE-2020-35580)

CVE-2020-35580

CWE-22

High

Metabase Local File Inclusion (CVE-2021-41277)

CVE-2021-41277

CWE-200

High

VMware vCenter vcavbootstrap Arbitrary File Read

-

-

High

WordPress Plugin BackWPup Multiple Local File Include Vulnerabilities (1.5.2)

-

CWE-22

High

WordPress Plugin DM Albums 'album.php' Remote File Inclusion (1.9.2)

CVE-2009-2396

CWE-94

High

WordPress Plugin OPS Old Post Spinner 'ops_file' Parameter Local File Include (2.2.1)

-

CWE-22

High

WordPress Plugin Theme My Login Local File Inclusion (6.3.9)

CVE-2014-5155

CWE-22

High

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner 'config' Parameter Local File Inclusion (3.0.3)

-

CWE-22

High

WordPress Plugin Advanced Custom Fields (ACF) 'acf_abspath' Parameter Remote File Include (3.5.1)

-

CWE-94

High

WordPress Plugin Floating Social Media Links 'wpp' Parameter Multiple Remote File Include Vulnerabilities (1.4.2)

-

CWE-94

High

WordPress Plugin WP Online Store Local File Include and Multiple File Disclosure Vulnerabilities (1.3.1)

-

CWE-538

High

WordPress Plugin Spicy Blogroll Local File Include (1.0.0)

-

CWE-22

High

WordPress Plugin Download Shortcode Local File Inclusion (0.2.3)

CVE-2014-5465

CWE-22

High

WordPress Plugin Ajax Pagination (twitter Style) Local File Inclusion (1.1)

CVE-2014-2674

CWE-22

High

WordPress Plugin CIP4 Folder Download Widget Local File Inclusion (1.10)

-

CWE-22

High

WordPress Plugin Zingiri Web Shop 'abspath' Parameter Remote File Include (2.4.6)

-

CWE-94

High

WordPress Plugin WPE Indoshipping Multiple Remote File Inclusion Vulnerabilities (2.5.0)

-

CWE-94

High

WordPress Plugin BookX Local File Inclusion (1.7)

CVE-2014-4937

CWE-22

High

WordPress Plugin Last.fm Rotation Local File Inclusion (1.0)

CVE-2014-5181

CWE-22

High