Lucene search
+L

11283 matches found

Cvelist
Cvelist
•added 2026/06/15 8:19 p.m.•58 views

CVE-2026-49105 WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

9.8CVSS0.00564EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/06/15 8:19 p.m.•25 views

EUVD-2026-36883

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact = 1.1.6 versions...

9.8CVSS5.3AI score0.00564EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/15 8:19 p.m.•18 views

CVE-2026-49106 WordPress Integration for Contact Form 7 and Constant Contact plugin <= 1.1.6 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact = 1.1.6 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/15 8:19 p.m.•34 views

EUVD-2026-36881

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.2.1 versions...

9.8CVSS5.3AI score0.00564EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/06/15 8:19 p.m.•65 views

CVE-2026-49104 WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.2.1 versions...

9.8CVSS0.00564EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/06/15 8:19 p.m.•18 views

CVE-2026-49104 WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms = 1.2.1 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits1References1
CVE
CVE
•added 2026/06/15 8:19 p.m.•78 views

CVE-2026-49104

CVE-2026-49104 affects the WordPress plugin “Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms” (versions

9.8CVSS5.7AI score0.00564EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/06/15 8:19 p.m.•57 views

CVE-2026-49085 WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

9.8CVSS0.00564EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/06/15 8:19 p.m.•26 views

EUVD-2026-36880

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

9.8CVSS5.3AI score0.00564EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/06/15 8:19 p.m.•23 views

CVE-2026-49085 WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms = 1.1.4 versions...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits1References1
CVE
CVE
•added 2026/06/15 8:19 p.m.•50 views

CVE-2026-49085

CVE-2026-49085 affects the WP Insightly plugin for WordPress when used with Contact Form 7, WPForms, Elementor, Formidable, and Ninja Forms (versions

9.8CVSS5.8AI score0.00564EPSS
SaveExploits1References1
CVE
CVE
•added 2026/06/15 8:18 p.m.•52 views

CVE-2026-42687

The CVE-2026-42687 entry concerns the WordPress EventPrime plugin (versions ≤ 4.3.2.1). It describes an unauthenticated PHP Object Injection vulnerability in EventPrime, with a CVSS v3.1 base score of 8.1 (HIGH) and a network attack vector, no user interaction, and high impact on confidentiality,...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/15 8:18 p.m.•52 views

CVE-2026-42687 WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

8.1CVSS0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/15 8:18 p.m.•22 views

CVE-2026-42687 WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/15 8:18 p.m.•22 views

EUVD-2026-36835

Unauthenticated PHP Object Injection in EventPrime = 4.3.2.1 versions...

8.1CVSS5.3AI score0.00436EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/15 8:18 p.m.•14 views

CVE-2026-39532 WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Events Calendar for GeoDirectory = 2.3.25 versions...

8.8CVSS5.8AI score0.00518EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/15 8:18 p.m.•39 views

CVE-2026-39532

The CVE-2026-39532 affects WordPress plugin “Events Calendar for GeoDirectory” up to version 2.3.25, with a PHP Object Injection vulnerability in Contributor PHP Object Injection in Events Calendar for GeoDirectory &lt;= 2.3.25. The associated CVSS v3.1 score is 8.8 (HIGH), vector: CVSS:3.1/AV:N/...

8.8CVSS5.8AI score0.00518EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/15 8:18 p.m.•48 views

CVE-2026-39532 WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Events Calendar for GeoDirectory = 2.3.25 versions...

8.8CVSS0.00518EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/15 8:17 p.m.•25 views

CVE-2026-39499 WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Advanced Product Fields Product Addons for WooCommerce = 1.6.19 versions...

7.2CVSS5.8AI score0.00539EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/15 8:17 p.m.•41 views

CVE-2026-39499

The connected PatchStack entry documents a PHP Object Injection vulnerability in the WordPress plugin “Advanced Product Fields (Product Addons) for WooCommerce” (versions

7.2CVSS5.8AI score0.00539EPSS
SaveExploits0References1
Rows per page
Query Builder