CWE-98

High likelihood

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The PHP application receives input from an upstream component, but it does not restrict or incorrectly restricts the input before its usage in "require," "include," or similar functions.

1,270 vulnerabilities with CWE-98
CVE-2026-22395 HIGH
Mikado-Themes Fiorello <=1.0 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22394 HIGH
Mikado-Themes Evently <=1.7 - PHP RFI
CVSS 8.1
CVE-2026-22392 HIGH
Mikado-Themes Cortex <=1.5 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22389 HIGH
Mikado-Themes Cocco <=1.5.1 - PHP RFI
CVSS 8.1
CVE-2026-22387 HIGH
Mikado-Themes Aviana <=2.1 - PHP RFI
CVSS 8.1
CVE-2026-22385 HIGH
Wolmart <=1.9.6 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22381 HIGH
PawFriends <=1.3 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22380 HIGH
AncoraThemes UnlimHost <=1.2.3 - PHP RFI
CVSS 8.1
CVE-2026-22379 HIGH
AncoraThemes Netmix <=1.0.10 - PHP RFI
CVSS 8.1
CVE-2026-22378 HIGH
AncoraThemes Blabber <=1.7.0 - PHP RFI
CVSS 8.1
CVE-2026-22377 HIGH
AncoraThemes Saveo <=1.1.2 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22376 HIGH
AncoraThemes Parkivia <=1.1.9 - PHP RFI
CVSS 8.1
CVE-2026-22375 HIGH
Impacto Patronus <=1.2.3 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22374 HIGH
AncoraThemes Zio Alberto <=1.2.2 - PHP RFI
CVSS 8.1
CVE-2026-22373 HIGH
Fooddy <=1.3.10 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22372 HIGH
AncoraThemes Isida <=1.4.2 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22371 HIGH
AncoraThemes Gustavo <=1.2.2 - PHP RFI
CVSS 8.1
CVE-2026-22370 HIGH
axiomthemes Marveland <=1.3.0 - PHP RFI
CVSS 8.1
CVE-2026-22369 HIGH
AncoraThemes Ironfit <=1.5 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22368 HIGH
axiomthemes Redy <=1.0.2 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22367 HIGH
AncoraThemes Coworking <=1.6.1 - PHP RFI
CVSS 8.1
CVE-2026-22366 HIGH
Jude <=1.3.0 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22365 HIGH
Soleng <=1.0.5 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22364 HIGH
SevenTrees <=1.0.2 - PHP Local File Inclusion
CVSS 8.1
CVE-2026-22363 HIGH
Rhodos <=1.3.3 - PHP Local File Inclusion
CVSS 8.1
Details
Vulnerabilities 1,270
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits