Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

19607 matches found

NVD
NVD•added 2026/02/26 9:16 a.m.•14 views

CVE-2026-28083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.5...

6.5CVSS0.0013EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/02/26 8:33 a.m.•28 views

CVE-2026-28083 WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.5...

6.5CVSS0.0013EPSS
SaveExploits0References1
CVE
CVE•added 2026/02/26 8:33 a.m.•57 views

CVE-2026-28083

The CVE-2026-28083 entry concerns the UX-themes Flatsome WordPress theme with a Stored XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are Flatsome for WordPress up to 3.20.5 (and variants noted in other records as up to 3.20.1); the unde...

6.5CVSS5.8AI score0.0013EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB•added 2026/02/26 8:33 a.m.•10 views

CVE-2026-28132

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in villatheme WooCommerce Photo Reviews woocommerce-photo-reviews allows Code Injection.This issue affects WooCommerce Photo Reviews: from n/a through = 1.4.4...

5.3CVSS5.4AI score0.00194EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2026/02/26 8:33 a.m.•7 views

CVE-2026-28083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.1...

6.5CVSS5.3AI score0.0013EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/02/26 8:33 a.m.•7 views

CVE-2026-28083 WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.5...

6.5CVSS5.2AI score0.0013EPSS
SaveExploits0References1
Packet Storm
Packet Storm•added 2026/02/26 12:00 a.m.•174 views

📄 WordPress TeconceTheme Coven Core 1.3 Blind SQL Injection

Proof of concept exploit for a remote blind SQL injection vulnerability in Wordpress TeconceTheme Coven Core theme version 1.3. ============================================================================================================================================= | Title : TeconceTheme Cove...

9.3CVSS5.9AI score0.0041EPSS
SaveExploits2
Positive Technologies
Positive Technologies•added 2026/02/26 12:00 a.m.•15 views

PT-2026-22132

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.1...

5.3AI score0.0013EPSS
SaveExploits0References2
OSV
OSV•added 2026/02/25 6:44 p.m.•12 views

DRUPAL-CONTRIB-2026-012

This module allows site builders to create so-called "theme\rule" config entities. These theme rules can render pages with different themes than the default when certain conditions match. The module uses simple GET request to disable or enable theme rules, which allows attackers to disable or...

4.3CVSS5.5AI score0.00098EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/02/25 12:38 p.m.•12 views

WordPress Alliance theme <= 3.1.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Alliance versions = 3.1.1...

8.1CVSS5.9AI score0.00504EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:38 p.m.•20 views

WordPress Tribe theme <= 1.7.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Tribe versions = 1.7.3...

8.1CVSS5.9AI score0.00519EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:37 p.m.•9 views

WordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Zentrum versions = 1.0...

8.1CVSS5.9AI score0.00519EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:37 p.m.•8 views

WordPress Helvig theme <= 1.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Helvig versions = 1.0...

8.1CVSS5.9AI score0.00504EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:36 p.m.•16 views

WordPress Alchemists theme <= 4.6.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Alchemists versions = 4.6.0...

8.1CVSS5.9AI score0.00403EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:35 p.m.•11 views

WordPress Green Planet theme <= 1.1.14 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Green Planet versions = 1.1.14...

8.1CVSS5.9AI score0.00504EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:35 p.m.•13 views

WordPress Playa theme <= 1.3.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Playa versions = 1.3.9...

8.1CVSS5.9AI score0.00504EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:35 p.m.•11 views

WordPress ElectroServ theme <= 1.3.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme ElectroServ versions = 1.3.2...

8.1CVSS5.9AI score0.00504EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:34 p.m.•15 views

WordPress Crown Art theme <= 1.2.11 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Crown Art versions = 1.2.11...

8.1CVSS5.9AI score0.00504EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:34 p.m.•13 views

WordPress CloudMe theme <= 1.2.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme CloudMe versions = 1.2.2...

8.1CVSS5.9AI score0.00504EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack•added 2026/02/25 12:34 p.m.•9 views

WordPress Woopy theme <= 1.2 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Woopy versions = 1.2...

8.1CVSS5.9AI score0.00519EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder