CWE-284 (2608) CWE-79 (1775) CWE-416 (1278) CWE-862 (1126) CWE-89 (1088) CWE-22 (1003) CWE-125 (861) CWE-200 (836) CWE-306 (831) CWE-122 (821) CWE-20 (785) CWE-78 (697) CWE-918 (680) CWE-787 (674) CWE-94 (626) CWE-863 (600) CWE-74 (599) CWE-639 (530) CWE-400 (510) CWE-269 (499) CWE-119 (493) CWE-770 (428) CWE-502 (422) CWE-287 (419) CWE-121 (403) CWE-77 (371) CWE-190 (360) CWE-362 (319) CWE-352 (270) CWE-285 (240)

CWE-98

93 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2025-65656 critical 9.8 0.0046 2025-12-02 dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager
CVE-2026-66587 critical 9.8 0.0050 2026-08-24 Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.
CVE-2026-112832 critical 9.8 0.0044 2026-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2016-20101 critical 9.2 — 2026-10-20 Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allow
CVE-2026-44177 high 8.8 0.0177 2026-07-16 Kirby is an open-source content management system. In versions 5.3.0 and above but prior to 5.4.1, K
CVE-2026-32560 high 8.8 0.0046 2026-08-24 Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Gen
CVE-2026-49954 high 8.6 0.0053 2026-06-15 Discuz! X5.0 releases 20260320 through 20260610 contain a local file inclusion vulnerability that al
CVE-2025-58214 high 8.1 0.0059 2025-09-05 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-58955 high 8.1 0.0052 2025-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-58958 high 8.1 0.0053 2025-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-58967 high 8.1 0.0053 2025-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-59550 high 8.1 0.0052 2025-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-59555 high 8.1 0.0053 2025-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-59558 high 8.1 0.0053 2025-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-59564 high 8.1 0.0053 2025-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-62053 high 8.1 0.0043 2025-11-06 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2025-62055 high 8.1 0.0043 2025-11-06 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2026-22325 high 8.1 0.0036 2026-06-17 Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
CVE-2026-22326 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.
CVE-2026-22330 high 8.1 0.0036 2026-06-17 Unauthenticated Local File Inclusion in Right Way <= 4.0 versions.
CVE-2026-22331 high 8.1 0.0036 2026-06-17 Unauthenticated Local File Inclusion in AutoParts <= 1.5.8 versions.
CVE-2026-22338 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.
CVE-2026-34893 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.
CVE-2026-34894 high 8.1 0.0042 2026-06-17 Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.
CVE-2026-34895 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.
CVE-2026-39522 high 8.1 0.0042 2026-06-17 Unauthenticated Local File Inclusion in Solene <= 3.4 versions.
CVE-2026-39537 high 8.1 0.0042 2026-06-17 Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.
CVE-2026-39547 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Getaway < 1.8 versions.
CVE-2026-39549 high 8.1 0.0042 2026-06-17 Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.
CVE-2026-39558 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.
CVE-2026-39568 high 8.1 0.0042 2026-06-17 Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.
CVE-2026-39582 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.
CVE-2026-40731 high 8.1 0.0042 2026-06-17 Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.
CVE-2026-39523 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions.
CVE-2026-39559 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Uppercase < 1.2.2 versions.
CVE-2026-39590 high 8.1 0.0034 2026-06-17 Unauthenticated Local File Inclusion in Atomlab <= 2.4.5 versions.
CVE-2026-54814 high 8.1 0.0033 2026-06-17 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2026-54845 high 8.1 0.0047 2026-06-25 Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.
CVE-2026-27412 high 8.1 0.0047 2026-07-02 Unauthenticated Local File Inclusion in Pearl - Corporate Business <= 3.4.10 versions.
CVE-2026-42382 high 8.1 0.0047 2026-07-02 Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.
CVE-2026-57743 high 8.1 0.0056 2026-07-13 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio
CVE-2026-66653 high 8.1 0.0047 2026-08-13 Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.
CVE-2026-66656 high 8.1 0.0047 2026-08-13 Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.
CVE-2026-66657 high 8.1 0.0047 2026-08-13 Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.
CVE-2026-28570 high 8.1 0.0047 2026-08-18 Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.
CVE-2026-32464 high 8.1 0.0047 2026-08-18 Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.
CVE-2026-73400 high 8.1 0.0047 2026-08-18 Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions.
CVE-2026-28151 high 8.1 0.0047 2026-08-24 Unauthenticated Local File Inclusion in Tonda < 2.6 versions.
CVE-2026-28152 high 8.1 0.0047 2026-08-24 Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.
CVE-2026-112820 high 8.1 0.0044 2026-10-22 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio