479468 matches found
CVE-2026-66439
CVE-2026-66439 concerns the WordPress plugin Advanced AJAX Product Filters with versions up to 3.2.0.3, where an unauthenticated cross-site scripting (XSS) vulnerability exists. The connected sources consistently describe an XSS flaw in this plugin version range, but do not provide concrete detai...
EUVD-2026-53880
Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder = 1.9.0 versions...
CVE-2026-65581 WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65581
The CVE-�2026-65581 entry concerns the WordPress AI ANN theme (<= 1.29.0) and describes an unauthenticated PHP Object Injection vulnerability. The connected documents corroborate the affected product and version range, with a focus on PHP object injection as the underlying issue. There are no ...
CVE-2026-65579 WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65578 WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agora = 1.9 versions...
EUVD-2026-53995
Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...
CVE-2026-65577
WordPress Advice theme,
CVE-2026-65577 WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...
CVE-2026-65576
CVE-2026-65576 affects WordPress Adrena theme <= 1.2.14. The issue is unauthenticated PHP Object Injection in the theme code, enabling high-impact impact per CVSS 3.1 metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The connected sources confirm the vulnerability exists in Adrena
EUVD-2026-53994
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65575
CVE-2026-65575 describes an unauthenticated PHP Object Injection affecting the WordPress theme Accalia up to version 1.5.3 . The vulnerability exists in the Accalia theme and exposes a critical impact (CVSSv3.1: 9.8, HIGH for confidentiality, integrity, and availability) with network attack vecto...
CVE-2026-65575
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
EUVD-2026-53993
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
CVE-2026-65574 WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
EUVD-2026-53990
Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...
CVE-2026-65572
The CVE-2026-65572 entry concerns the WordPress A.Williams theme (versions
CVE-2026-65572 WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...