19622 matches found
PT-2026-21166
Name of the Vulnerable Software and Affected Versions AgniHD Cartify - WooCommerce Gutenberg WordPress Theme versions through 1.3 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the...
WordPress plugin TopperPack – Complete Elementor Addons, Theme & CPT Builder 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
PT-2026-21135
Name of the Vulnerable Software and Affected Versions TeconceTheme Nestbyte Core versions through 1.2 Description A flaw exists in TeconceTheme Nestbyte Core that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially...
PT-2026-21128
Name of the Vulnerable Software and Affected Versions PhotoMe versions n/a through 5.6.11 Description A flaw exists in PhotoMe that allows for object injection due to deserialization of untrusted data. This issue impacts the application's ability to securely handle incoming data, potentially...
PT-2026-21179
Name of the Vulnerable Software and Affected Versions ThemeREX Plank versions through 1.7 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. Recommendations...
CVE-2026-27343 WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusion.This issue affects Airtifact: from n/a through = 1.2.91...
CVE-2026-27328
CVE-2026-27328 affects the WordPress EduBlink theme (edublink) ≤ 2.0.7. The root cause is missing/incorrectly configured access control, described as a Missing Authorization vulnerability that enables access control bypass. The available sources consistently label this as a broken access control ...
CVE-2026-27343 WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusion.This issue affects Airtifact: from n/a through = 1.2.91...
CVE-2026-27328 WordPress EduBlink theme <= 2.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduBlink: from n/a through = 2.0.7...
CVE-2026-27328 WordPress EduBlink theme <= 2.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in DevsBlink EduBlink edublink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EduBlink: from n/a through = 2.0.7...
CVE-2026-27069
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through = 8.7.2...
CVE-2026-25422
Cross-Site Request Forgery CSRF vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through = 1.2.10...
CVE-2026-27069 WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through = 8.7.2...
CVE-2026-27069
CVE-2026-27069 affects the WordPress Soledad theme
CVE-2026-27069 WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through = 8.7.2...
CVE-2026-27069
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through = 8.7.2...
CVE-2026-25459 WordPress Sober theme <= 3.5.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober: from n/a through = 3.5.12...
CVE-2026-25459
CVE-2026-25459 affects the WordPress Sober theme (uixthemes Sober) prior to version 3.5.12, described as a Missing Authorization vulnerability due to incorrectly configured access control. Affected component is the Sober WordPress theme; root cause is broken/incorrect access controls enabling ins...
CVE-2026-25459 WordPress Sober theme <= 3.5.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober: from n/a through = 3.5.12...