Vulnerability Weakness Types
Browse CVEs by CWE classification. Click a CWE to see all associated vulnerabilities.
CWE-284 (2634)
CWE-79 (1848)
CWE-416 (1298)
CWE-862 (1184)
CWE-89 (1097)
CWE-22 (1024)
CWE-125 (884)
CWE-200 (847)
CWE-306 (838)
CWE-122 (831)
CWE-20 (798)
CWE-78 (711)
CWE-918 (690)
CWE-787 (686)
CWE-863 (643)
CWE-94 (642)
CWE-74 (600)
CWE-639 (543)
CWE-400 (531)
CWE-119 (503)
CWE-269 (501)
CWE-502 (471)
CWE-770 (441)
CWE-287 (432)
CWE-121 (408)
CWE-77 (373)
CWE-190 (370)
CWE-362 (323)
CWE-352 (281)
CWE-285 (243)
| CVE | Severity | CVSS | EPSS | Published | Description | Flags |
|---|---|---|---|---|---|---|
CVE-2026-112850 |
high | 8.1 | 0.0034 | 2026-10-23 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2017-20289 |
high | 7.7 | 0.0093 | 2026-10-22 | Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulne | |
CVE-2026-28039 |
high | 7.5 | 0.0037 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-49935 |
high | 7.5 | 0.0048 | 2025-10-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-39463 |
high | 7.5 | 0.0061 | 2025-11-06 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-62066 |
high | 7.5 | 0.0039 | 2025-11-06 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-67521 |
high | 7.5 | 0.0044 | 2025-12-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-67525 |
high | 7.5 | 0.0044 | 2025-12-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-67526 |
high | 7.5 | 0.0044 | 2025-12-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-67527 |
high | 7.5 | 0.0044 | 2025-12-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-67529 |
high | 7.5 | 0.0044 | 2025-12-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-67531 |
high | 7.5 | 0.0044 | 2025-12-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2025-64193 |
high | 7.5 | 0.0046 | 2025-12-18 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-48972 |
high | 7.5 | 0.0031 | 2026-05-27 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-40721 |
high | 7.5 | 0.0040 | 2026-06-17 | Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions. | |
CVE-2026-57647 |
high | 7.5 | 0.0043 | 2026-06-26 | Contributor Local File Inclusion in Panorama Viewer – 360 Degree Image + Video Viewer <= 1.6.1 versi | |
CVE-2026-57748 |
high | 7.5 | 0.0043 | 2026-07-02 | Contributor Local File Inclusion in Shopify <= 1.0.0 versions. | |
CVE-2026-57749 |
high | 7.5 | 0.0043 | 2026-07-02 | Contributor Local File Inclusion in SportsPress Pro <= 2.7.29 versions. | |
CVE-2026-57788 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57789 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57790 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57791 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57792 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57793 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57794 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57795 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57796 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57798 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57799 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57800 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57801 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57802 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57803 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57804 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-57805 |
high | 7.5 | 0.0051 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusio | |
CVE-2026-65477 |
high | 7.5 | 0.0043 | 2026-07-23 | Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions. | |
CVE-2026-65481 |
high | 7.5 | 0.0043 | 2026-07-23 | Contributor Local File Inclusion in Vino <= 1.9 versions. | |
CVE-2014-125137 |
high | 7.1 | 0.0072 | 2026-10-28 | C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 cont | |
CVE-2026-30480 |
medium | 6.5 | 0.0027 | 2026-04-14 | A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-2 | |
CVE-2026-110185 |
medium | 5.9 | 0.0055 | 2026-10-28 | The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More | |
CVE-2026-63302 |
medium | 5.1 | 0.0053 | 2026-07-28 | Quick.CMS is vulnerable to Local File Inclusion (LFI) in the admin.php endpoint via the p parameter. | |
CVE-2026-15540 |
low | 2.1 | 0.0042 | 2026-07-13 | A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is | |
CVE-2026-87902 |
— | — | 0.9577 | — | WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated a | KEV |