CVE-2025-69080High· 8.1▾ MidnightPoC availableImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through <= 1.9.8.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 44.6 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.5%
0.5% → 0.5%
Last analysed / modified upstream
1 GitHub repo (last check)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in JanStudio Gecko gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through <= 1.9.8.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2017-20289High· 7.5Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter
CVE-2016-20101High· 8.1Issuu Panel WordPress Plugin < 1.6.6 File Inclusion via ajax-docs.php
CVE-2019-25760Medium· 6.2Joomla! Component Easy Shop 1.2.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by supplying base64-encoded file paths
CVE-2026-112832Critical· 9.8WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability
CVE-2026-112820High· 8.1WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability
CVE-2026-111829Medium· 6.5WordPress WP Mailster plugin <= 1.9.1.0 - Local File Inclusion vulnerability