CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

1.393 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-66568 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
CVE-2026-66567 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
CVE-2026-66565 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
CVE-2026-66564 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
CVE-2026-66563 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVE-2026-66483 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVE-2026-66482 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Drone Media theme <= 2.2.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVE-2026-62130 High · 7.2 CWE-502 Oct 10, 2026
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVE-2026-62125 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Asia Garden theme <= 1.3.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVE-2026-62124 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress N7 | Golf Club Sports & Events theme <= 2.21 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVE-2026-62123 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Invetex theme <= 2.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
CVE-2026-62120 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Law Office theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
CVE-2026-62090 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress WineShop theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.
CVE-2026-62087 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Equadio theme <= 1.1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.
CVE-2026-62086 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Juno theme <= 2.25 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Juno <= 2.25 versions.
CVE-2026-62077 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Avala theme <= 1.1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.
CVE-2026-62076 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Kalles theme <= 1.1.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.
CVE-2026-62054 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Yacht Rental theme <= 2.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.
CVE-2026-62053 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Wine House theme <= 3.20 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.
CVE-2026-62052 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Tipsy theme <= 1.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.
CVE-2026-62051 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.
CVE-2026-62050 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.
CVE-2026-62021 High · 8.8 CWE-502 Oct 10, 2026
WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Angio <= 1.1.1 versions.
CVE-2026-42723 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVE-2026-42719 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.