WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme IPharm versions = 1.2.4...

WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Let's Play versions = 1.1.15...

WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Original versions = 1.9.0...

WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Partiso versions = 1.1.13...

WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Rosalinda versions = 1.2.4...

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smart Casa versions = 1.0.12...

WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Smash versions = 1.12.0...

WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Tantra versions = 2.9.0...

WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Travesia versions = 1.1.16...

WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Veto versions = 1.6.0...

WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme Buzz Stone | Magazine & Viral Blog WordPress Theme versions = 1.0.2...

WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by daroo in WordPress Theme Photolia versions = 1.0.3...

CVE-2026-85097 Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...

EUVD-2026-94793

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...

CVE-2026-85097

The Bricksforge plugin for WordPress (versions up to and including 3.1.8.9 ) is vulnerable to unauthenticated arbitrary file upload . The root cause is insufficient validation of the attacker-controlled URL field within the 'temporaryFileUploads' parameter during form submission. An unauthenticat...

CVE-2023-3722

CVE-2023-3722 POC em Python para CVE-2023-3722 - Upload de Arquivo Irrestrito e RCE no Avaya Aura Device Services. Este script utiliza uma requisição PUT para enviar um arquivo PHP com um nome de arquivo gerado aleatoriamente de oito dígitos. Em seguida, faz uma requisição GET para recuperar este...

CVE-2026-103692

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including...

WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin YITH WooCommerce Affiliates versions = 3.31.0...

EUVD-2026-94762

The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PHP function or class method with the request data, allowing unauthenticated users to take over any account, including...

CVE-2026-11344-RCE

Sistema de Gerenciamento de Veículos em PHP - Execução Remota de Código Não Autenticada via Upload de Arquivo em newdriver.php Informações da Vulnerabilidade Campo| Detalhes ---|--- Produto| Vehicle Management System In PHP Fornecedor| code-projects.org Versão| V1.0 Tipo de Vulnerabilidade| Uploa...