News & Blog Designer Pack vulnerabilities

2 known vulnerabilities in News & Blog Designer Pack from InfornWeb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  News & Blog Designer Pack: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-31082Apr 1, 2025InfornWeb

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in InfornWeb News & Blog Designer Pack blog-designer-pack allows PHP Local File Inclusion.This issue affects News & Blog Designer Pack: from n

• 9.8 Critical severity

  Blog Designer Pack – Blog, Post Grid, Post…: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2023-5815Nov 22, 2023InfornWebEPSS 5.02%

  The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry) plugin for WordPress is vulnerable to Remote Code Execution via Local File Inclusion in all versions up to, and