National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 396,747 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,350 matching advisories
Page 156 of 1,890
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Weedles weedles allows PHP Local File Inclusion.This issue affects...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes MoveMe moveme allows PHP Local File Inclusion.This issue affects M...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes uReach ureach allows PHP Local File Inclusion.This issue affects u...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes DiveIt diveit allows PHP Local File Inclusion.This issue affects D...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes PartyMaker partymaker allows PHP Local File Inclusion.This issue a...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Eldon eldon allows PHP Local File Inclusion.This issue affects Eldo...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected XSS.This issue affects Hotel Listing: from ...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CVE-2025-69055 MEDIUM 6.5
CWE-22 Remote (AV:N)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SeaTheme BM Content Builder bm-builder allows Path Traversal.This issue affects BM Content Builder: from...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Logos Showcase superlogoshowcase-wp allows Reflected XSS.This issue affects Super...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CVE-2025-69052 CRITICAL 9.8
CWE-862 Remote (AV:N)

Missing Authorization vulnerability in FmeAddons Registration & Login with Mobile Phone Number for WooCommerce registration-login-with-mobile-phone-number allows Exploiting Incorrectly Configured Acce...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro Reviews listingpro-reviews allows Reflected XSS.This issue affects Listing...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affe...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Tรถbel tobel allows PHP Local File Inclusion.This issue affects Tรถ...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-79 Remote (AV:N)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in magentech MaxShop sw_maxshop allows PHP Local File Inclusion.This issue affects...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebGeniusLab iRecco Core irecco-core allows PHP Local File Inclusion.This issue...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-89 Remote (AV:N)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FooEvents FooEvents for WooCommerce fooevents allows SQL Injection.This issue affects FooEvents fo...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Vango vango allows PHP Local File Inclusion.This issue affects Vango...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Rashy rashy allows PHP Local File Inclusion.This issue affects Rashy...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Lindo lindo allows PHP Local File Inclusion.This issue affects Lindo...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Dekoro dekoro allows PHP Local File Inclusion.This issue affects Dek...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Bfres bfres allows PHP Local File Inclusion.This issue affects Bfres...

๐Ÿ“… 2026-01-22 Inspect Dossier →
CWE-98 Remote (AV:N)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Bailly bailly allows PHP Local File Inclusion.This issue affects Bai...

๐Ÿ“… 2026-01-22 Inspect Dossier →
Showing Page 156 of 1,890 • 45,350 matching CVEs (out of 396,747 NIST advisories)