CVE-2025-69114: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in MaxiNet = 1.2.10 versions...

CVE-2026-22343: Missing Authorization

Unauthenticated Broken Access Control in WordPress Dating Theme = 11.2.0 versions...

CVE-2025-69124: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Especio = 1.0 versions...

CVE-2025-69139: Improper Limitation of a Pathname to a Restricted Directory

Unauthenticated Arbitrary File Deletion in Car Zone = 3.7 versions...

CVE-2026-22334: Improper Limitation of a Pathname to a Restricted Directory

Subscriber Arbitrary File Download in Woocommerce Book Price = 1.3 versions...

CVE-2025-69145: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Gat = 1.16 versions...

CVE-2025-69171: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

CVE-2026-49057: Missing Authorization

Unauthenticated Broken Access Control in JobSearch = 3.2.7 versions...

CVE-2026-54187: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in JetEngine = 3.8.10.1 versions...

CVE-2026-49778: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPFunnels Pro = 2.9.4 versions...

CVE-2025-69172: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Resurs = 1.3 versions...

WordPress Theme: sonaar: CVE-2025-59563: Incorrect Privilege Assignment

Subscriber Privilege Escalation in Sonaar = 4.27.4 versions...

CVE-2026-54804: Authentication Bypass Using an Alternate Path or Channel

Subscriber Broken Authentication in Melhor Envio = 2.16.3 versions...

CVE-2026-40758: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Léonie = 1.2.1 versions...

CVE-2026-54195: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in JetFormBuilder = 3.6.0.1 versions...

CVE-2026-49081: Missing Authorization

Unauthenticated Broken Access Control in User Registration Stripe = 1.3.12 versions...

CVE-2025-69149: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Top Dog = 1.0.5 versions...

CVE-2025-69126: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Fortius = 2.3.0 versions...

CVE-2025-69123: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Snow Club = 1.1 versions...

CVE-2025-58924: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Geya = 1.15 versions...