CVE Intelligence
Início / CVEs

Base de CVEs

Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.

Severidade
Limpar

12.643 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2026-62124 Crítica · 9.8 CWE-502 10/10/2026
WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVE-2026-62123 Crítica · 9.8 CWE-502 10/10/2026
WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
CVE-2026-62120 Crítica · 9.8 CWE-502 10/10/2026
WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
CVE-2026-62090 Crítica · 9.8 CWE-502 10/10/2026
WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
CVE-2026-62087 Crítica · 9.8 CWE-502 10/10/2026
WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
CVE-2026-62086 Crítica · 9.8 CWE-502 10/10/2026
WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
CVE-2026-62077 Crítica · 9.8 CWE-502 10/10/2026
WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
CVE-2026-62076 Crítica · 9.8 CWE-502 10/10/2026
WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
CVE-2026-62054 Crítica · 9.8 CWE-502 10/10/2026
WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
CVE-2026-62053 Crítica · 9.8 CWE-502 10/10/2026
WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
CVE-2026-62052 Crítica · 9.8 CWE-502 10/10/2026
WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
CVE-2026-62051 Crítica · 9.8 CWE-502 10/10/2026
WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
CVE-2026-62050 Crítica · 9.8 CWE-502 10/10/2026
WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
CVE-2026-62032 Crítica · 9.8 CWE-98 10/10/2026
WordPress DirectoryPress plugin <= 3.6.27 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions.
CVE-2026-62031 Crítica · 9.3 CWE-89 10/10/2026
WordPress uListing plugin <= 2.2.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in uListing <= 2.2.0 versions.
CVE-2026-62025 Crítica · 9.0 CWE-434 10/10/2026
WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability
Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions.
CVE-2026-62024 Crítica · 9.9 CWE-434 10/10/2026
WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability
Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions.
CVE-2026-62022 Crítica · 9.8 CWE-266 10/10/2026
WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.
CVE-2026-42723 Crítica · 9.8 CWE-502 10/10/2026
Injeção de Objeto PHP no Tema WordPress CleanSkin (CVE-2026-42723)
Injeção de Objeto PHP não autenticada no CleanSkin, nas versões <= 1.5.0.
CVE-2026-42719 Crítica · 9.8 CWE-502 10/10/2026
WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
CVE-2026-42718 Crítica · 9.8 CWE-502 10/10/2026
Plugin Booster for WooCommerce para WordPress - Injeção de Objeto PHP
Injeção de objeto PHP não autenticada no Booster for WooCommerce, nas versões <= 8.4.0.
CVE-2026-42716 Crítica · 9.8 CWE-502 10/10/2026
Payever WooCommerce Gateway (WordPress) - Injeção de Objeto PHP não autenticada
Injeção de Objeto PHP não autenticada no Payever - WooCommerce Gateway nas versões <= 4.8.2.
CVE-2026-42696 Crítica · 10.0 CWE-94 10/10/2026
WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration &amp; Cloning sitevault-backup-restore-migration allows Remote Code Inclusion.This issue affects SiteVault – Backup, Restore, Migration &amp; Cloning: from n/a through 1.5.19.
CVE-2026-40800 Crítica · 9.3 CWE-89 10/10/2026
ELEX WooCommerce Advanced Bulk Edit (WordPress) - Injeção de SQL
Injeção de SQL por Subscriber em ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versões.
CVE-2026-39801 Crítica · 9.8 CWE-266 10/10/2026
WordPress AIWU plugin <= 1.5.9 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in AIWU <= 1.5.9 versions.