CVE Intelligence
Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

Severidade
Limpar

1.382 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2026-62120 Crítica · 9.8 CWE-502 10/10/2026
WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
CVE-2026-62090 Crítica · 9.8 CWE-502 10/10/2026
WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
CVE-2026-62087 Crítica · 9.8 CWE-502 10/10/2026
WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
CVE-2026-62086 Crítica · 9.8 CWE-502 10/10/2026
WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
CVE-2026-62077 Crítica · 9.8 CWE-502 10/10/2026
WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
CVE-2026-62076 Crítica · 9.8 CWE-502 10/10/2026
WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
CVE-2026-62054 Crítica · 9.8 CWE-502 10/10/2026
WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
CVE-2026-62053 Crítica · 9.8 CWE-502 10/10/2026
WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
CVE-2026-62052 Crítica · 9.8 CWE-502 10/10/2026
WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
CVE-2026-62051 Crítica · 9.8 CWE-502 10/10/2026
WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
CVE-2026-62050 Crítica · 9.8 CWE-502 10/10/2026
WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
CVE-2026-62021 Alta · 8.8 CWE-502 10/10/2026
WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
CVE-2026-42723 Crítica · 9.8 CWE-502 10/10/2026
Injeção de Objeto PHP no Tema WordPress CleanSkin (CVE-2026-42723)
Injeção de Objeto PHP não autenticada no CleanSkin, nas versões <= 1.5.0.
CVE-2026-42719 Crítica · 9.8 CWE-502 10/10/2026
WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
CVE-2026-42718 Crítica · 9.8 CWE-502 10/10/2026
Plugin Booster for WooCommerce para WordPress - Injeção de Objeto PHP
Injeção de objeto PHP não autenticada no Booster for WooCommerce, nas versões <= 8.4.0.
CVE-2026-42716 Crítica · 9.8 CWE-502 10/10/2026
Payever WooCommerce Gateway (WordPress) - Injeção de Objeto PHP não autenticada
Injeção de Objeto PHP não autenticada no Payever - WooCommerce Gateway nas versões <= 4.8.2.
CVE-2026-62044 Alta · 7.2 CWE-502 10/10/2026
WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13.
CVE-2026-104398 Crítica · 9.8 CWE-502 10/10/2026
WordPress AFFI – Affiliate Marketing for WooCommerce plugin <= 1.0.10 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a through 1.0.10.
CVE-2026-94676 Alta · 7.2 CWE-502 10/10/2026
WordPress Tainacan plugin <= 1.3.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0.
CVE-2026-105885 Alta · 8.8 CWE-502 10/10/2026
WordPress Slider by 10Web plugin <= 1.2.62 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62.
CVE-2026-93945 Crítica · 9.8 CWE-502 10/10/2026
WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.
CVE-2026-93944 Crítica · 9.8 CWE-502 10/10/2026
WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15.
CVE-2026-93943 Crítica · 9.8 CWE-502 10/10/2026
WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0.
CVE-2026-93942 Crítica · 9.8 CWE-502 10/10/2026
WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0.
CVE-2026-93941 Crítica · 9.8 CWE-502 10/10/2026
WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.