Total
1353 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-58913 | 2026-10-07 | N/A | 8.1 HIGH | ||
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CactusThemes VideoPro videopro allows PHP Local File Inclusion.This issue affects VideoPro: from n/a through <= 2.3.8.1. | |||||
| CVE-2025-67936 | 1 Qodeinteractive | 1 Curly | 2026-10-07 | N/A | 8.1 HIGH |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP Local File Inclusion.This issue affects Curly: from n/a through < 3.3. | |||||
| CVE-2025-32151 | 1 Themekraft | 1 Buddyforms | 2026-10-07 | N/A | 7.5 HIGH |
| Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themekraft BuddyForms buddyforms allows PHP Local File Inclusion.This issue affects BuddyForms: from n/a through 2.10.2. | |||||
| CVE-2026-34036 | 1 Dolibarr | 1 Dolibarr Erp\/crm | 2026-10-07 | N/A | 6.5 MEDIUM |
| Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. In versions 22.0.4 and prior, there is a Local File Inclusion (LFI) vulnerability in the core AJAX endpoint /core/ajax/selectobject.php. By manipulating the objectdesc parameter and exploiting a fail-open logic flaw in the core access control function restrictedArea(), an authenticated user with no specific privileges can read the contents of arbitrary non-PHP files on the server (such as .env, .htaccess, configuration backups, or logs…). At time of publication, there are no publicly available patches. | |||||
| CVE-2018-25231 | 1 Heidisql | 1 Heidisql | 2026-10-07 | N/A | 6.2 MEDIUM |
| HeidiSQL 9.5.0.5196 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long file path in the logging preferences. Attackers can input a buffer-overflow payload through the SQL log file path field in Preferences > Logging to trigger an application crash. | |||||
| CVE-2025-49403 | 2026-10-07 | N/A | 7.5 HIGH | ||
| Unauthenticated Arbitrary File Download in Premium Age Verification / Restriction for WordPress <= 3.0.2 versions. | |||||
| CVE-2025-69125 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions. | |||||
| CVE-2025-69166 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Gunslinger <= 1.7 versions. | |||||
| CVE-2025-69146 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Dom <= 1.24 versions. | |||||
| CVE-2025-69123 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Snow Club <= 1.1 versions. | |||||
| CVE-2025-69121 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions. | |||||
| CVE-2025-69174 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Etude <= 1.6 versions. | |||||
| CVE-2025-69177 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions. | |||||
| CVE-2025-69105 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Modernee <= 1.6.0 versions. | |||||
| CVE-2025-69157 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Gamic <= 1.15 versions. | |||||
| CVE-2025-69109 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions. | |||||
| CVE-2025-69160 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Gita <= 1.11 versions. | |||||
| CVE-2025-69120 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Dazzle <= 1.0.0 versions. | |||||
| CVE-2025-69148 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Quirky <= 1.23 versions. | |||||
| CVE-2025-69115 | 2026-10-06 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in LuxMed | Medicine & Healthcare Doctor WordPress Theme <= 1.2.2 versions. | |||||