CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

2 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-97076 High · 7.5 CWE-624 Oct 9, 2026
WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability
Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before 3.23.5.
CVE-2026-25237 Critical · 9.8 CWE-624 Feb 3, 2026
PEAR Pearweb: PHP code execution via preg_replace /e modifier
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in version 1.33.0.