CVE-2026-54806

Unauthenticated PHP Object Injection in WP Activity Log = 5.6.3.1 versions...

CVE-2026-54187

Unauthenticated SQL Injection in JetEngine = 3.8.10.1 versions...

CVE-2026-54194

Contributor PHP Object Injection in Fusion Builder = 3.15.4 versions...

CVE-2026-54185

Subscriber SQL Injection in Cornerstone 7.8.8 versions...

CVE-2026-54186

Unauthenticated SQL Injection in JobSearch = 3.2.9 versions...

CVE-2026-53876

RadiX AX6600 WiFi 6 Tri-Band Gaming Router contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who logs in to the web console as an administrator...

CVE-2026-52706

Unauthenticated PHP Object Injection in JetEngine = 3.8.10 versions...

CVE-2026-49080

Unauthenticated SQL Injection in wpDataTables = 7.3.6 versions...

CVE-2026-49107

Unauthenticated PHP Object Injection in Thrive Apprentice 10.8.10.2 versions...

CVE-2026-49084

Unauthenticated SQL Injection in JetEngine 3.8.9.1 versions...

CVE-2026-49079

Unauthenticated SQL Injection in JetSearch = 3.5.17 versions...

CVE-2026-49075

Contributor PHP Object Injection in JetEngine = 3.8.9.1 versions...

CVE-2026-49076

Unauthenticated SQL Injection in JetEngine = 3.8.9.1 versions...

CVE-2026-49073

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpWax Directorist Booking allows Blind SQL Injection. This issue affects Directorist Booking: from n/a through 3.0.3...

CVE-2026-48967

Subscriber SQL Injection in Geo Mashup = 1.13.19 versions...

CVE-2026-48875

Unauthenticated SQL Injection in JetSmartFilters = 3.8.1 versions...

CVE-2026-42380

Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...

CVE-2026-40759

Unauthenticated PHP Object Injection in Esmée = 1.4 versions...

CVE-2026-40760

Unauthenticated PHP Object Injection in Behold = 1.5 versions...

CVE-2026-40758

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...