CWE-98 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-98 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-87902An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen…95.8%높음8.1● 실제 악용이 확인됨CVE-2025-68645A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration …48.9%높음8.8CVE-2026-12227The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in al…2.9%심각9.8CVE-2026-104909The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and…1.0%높음8.1CVE-2026-103367The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Incl…1.0%높음8.1CVE-2017-20289Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulne…0.9%높음7.7CVE-2026-104995The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, …0.9%높음8.1CVE-2026-27556A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/…0.9%높음8.8
전체 목록
63건
CVE-2026-27555A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/get_i…0.8%높음8.8
CVE-2014-125137C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a loca…0.7%높음7.1
CVE-2026-85200The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including,…0.8%높음7.5
CVE-2026-13456The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress …0.7%높음7.5
CVE-2026-110284The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local Fi…0.7%높음7.5
CVE-2026-75028The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable t…0.7%높음7.5
CVE-2026-73695Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users…0.7%높음8.7
CVE-2026-15406The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulne…0.7%높음7.5
CVE-2026-89294The Simply Schedule Appointments plugin for WordPress is vulnerable to Local File Inclusion in all versions up…0.6%높음7.5
CVE-2026-92969The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Local File Incl…0.7%높음8.1
CVE-2026-104899The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vuln…0.6%높음8.1
CVE-2010-20125DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthe…0.6%높음8.7
CVE-2026-110185The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin fo…0.6%보통5.9
CVE-2026-9231The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Loca…0.6%높음7.5
CVE-2026-15667The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulne…0.6%높음7.5
CVE-2026-92174The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to…0.6%높음7.5
CVE-2026-62858YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extr…0.5%보통5.3
CVE-2026-11613The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inc…0.5%심각9.8
CVE-2026-112832Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…0.4%심각9.8
CVE-2026-112820Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…0.4%높음8.1
CVE-2026-50547InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1…0.5%높음7.5
CVE-2026-39353InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1…0.4%심각9.1
CVE-2026-62121Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…0.4%보통6.5
CVE-2016-20101Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthen…0.4%심각9.2
CVE-2026-88994The All Bootstrap Blocks WordPress plugin through 1.3.31 does not validate a block attribute before using it t…0.4%보통6.6
CVE-2026-113402ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remo…0.4%높음7.1
CVE-2026-112850Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…0.3%높음8.1
CVE-2026-87927MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispat…0.3%높음8.8
CVE-2026-94062Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…0.3%높음8.1
CVE-2026-94067Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…0.3%높음8.1
CVE-2026-71426GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.…0.3%높음7.1
CVE-2026-111829Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner…0.3%보통6.5
CVE-2026-49850InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1…0.3%높음7.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.