Threat Entry Updated 2025-08-14

CVE-2025-52728 - Allows Php Local File Inclusion Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebCodingPlace Responsive Posts Carousel WordPress Plugin allows PHP Local File Inclusion. This issue affects Responsive Posts Carousel WordPress Plugin: from n/a through 15.0.

PLUGIN Allows Php Local File Inclusion

CVE-2025-52728

HIGH CVSS 7.5 2025-08-14

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-07-08

CVE-2025-52807 - Allows Php Local File Inclusion Theme

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusWP Kossy - Minimalist eCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Kossy - Minimalist eCommerce WordPress Theme: from n/a through 1.45.

THEME Allows Php Local File Inclusion

CVE-2025-52807

HIGH CVSS 8.1 2025-07-04

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-30

CVE-2025-52811 - Allows Php Local File Inclusion Theme

Path Traversal vulnerability in Creanncy Davenport - Versatile Blog and Magazine WordPress Theme allows PHP Local File Inclusion. This issue affects Davenport - Versatile Blog and Magazine WordPress Theme: from n/a through 1.3.

THEME Allows Php Local File Inclusion

CVE-2025-52811

HIGH CVSS 8.1 2025-06-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-30

CVE-2025-28947 - Allows Php Local File Inclusion Theme

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme MBStore - Digital WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects MBStore - Digital WooCommerce WordPress Theme: from n/a through 2.3.

THEME Allows Php Local File Inclusion

CVE-2025-28947

HIGH CVSS 8.1 2025-06-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-30

CVE-2023-25998 - Allows Php Local File Inclusion Theme

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through 2.6.

THEME Allows Php Local File Inclusion

CVE-2023-25998

HIGH CVSS 8.1 2025-06-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-12

CVE-2025-28945 - Allows Php Local File Inclusion Theme

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Valen - Sport, Fashion WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects Valen - Sport, Fashion WooCommerce WordPress Theme: from n/a through 2.4.

THEME Allows Php Local File Inclusion

CVE-2025-28945

HIGH CVSS 8.1 2025-06-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-06-12

CVE-2023-25999 - Allows Php Local File Inclusion Theme

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme BodyCenter - Gym, Fitness WooCommerce WordPress Theme allows PHP Local File Inclusion. This issue affects BodyCenter - Gym, Fitness WooCommerce WordPress Theme: from n/a through 2.4.

THEME Allows Php Local File Inclusion

CVE-2023-25999

HIGH CVSS 8.1 2025-06-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-05-23

CVE-2025-31912 - Allows Php Local File Inclusion Theme

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Enzio - Responsive Business WordPress Theme allows PHP Local File Inclusion. This issue affects Enzio - Responsive Business WordPress Theme: from n/a through 1.1.8.

THEME Allows Php Local File Inclusion

CVE-2025-31912

HIGH CVSS 8.1 2025-05-23

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-05-23

CVE-2025-31633 - Allows Php Local File Inclusion Theme

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kiamo - Responsive Business Service WordPress Theme allows PHP Local File Inclusion. This issue affects Kiamo - Responsive Business Service WordPress Theme: from n/a through 1.3.3.

THEME Allows Php Local File Inclusion

CVE-2025-31633

HIGH CVSS 8.1 2025-05-23

Risk Score

Open Full Technical Breakdown