CVE-2026-54812: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Blind SQL Injection.This issue affects Motors: from n/a through 1.4.109...

CVE-2026-54193: Improper Limitation of a Pathname to a Restricted Directory

Contributor Arbitrary File Deletion in Fusion Builder = 3.15.4 versions...

CVE-2026-52716: Improper Limitation of a Pathname to a Restricted Directory

Unauthenticated Arbitrary File Deletion in WorkScout-Core = 1.7.11 versions...

CVE-2026-52707: Path Traversal: '.../...//'

Unauthenticated Local File Inclusion in Kastell = 2.0 versions...

CVE-2026-40752: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Manufaktur Solutions = 1.1.1 versions...

CVE-2026-40738: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Eldon = 1.4.1 versions...

CVE-2026-40733: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...

CVE-2026-39590: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Atomlab = 2.4.5 versions...

CVE-2026-39559: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Uppercase 1.2.2 versions...

CVE-2026-39445: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Alukas 3.0.0 versions...

CVE-2026-39523: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Solene Core = 2.3.2 versions...

CVE-2026-39442: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in PressMart = 1.2.26 versions...

CVE-2025-69175: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Line Agency = 1.3.1 versions...

CVE-2025-69174: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Etude = 1.6 versions...

CVE-2025-69170: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Eventicity = 1.5 versions...

CVE-2025-69166: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Gunslinger = 1.7 versions...

CVE-2025-69144: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Preservation = 1.10 versions...

CVE-2025-69128: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...

CVE-2025-69120: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Dazzle = 1.0.0 versions...

CVE-2025-69123: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...