21827 matches found
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into /.local/state/omarchy/current/theme may include executable content from an untrusted Git repository...
EUVD-2026-97101
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into /.local/state/omarchy/current/theme may include executable content from an untrusted Git repository...
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into /.local/state/omarchy/current/theme may include executable content from an untrusted Git repository...
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into /.local/state/omarchy/current/theme may include executable content from an untrusted Git repository...
wpscvn
wpscvn es una herramienta para pentesters y propietarios de sitios web para probar si sus sitios tienen algunos plugins o temas vulnerables. El autor no se hace responsable del mal uso de esta herramienta, recuerda que atacar objetivos sin consentimiento previo es ilegal y castigado por la ley...
CVE-2026-108913: Inclusion of Functionality from Untrusted Control Sphere
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into /.local/state/omarchy/current/theme may include executable content from an untrusted Git repository...
PT-2026-110217
Name of the Vulnerable Software and Affected Versions Omarchy versions prior to 4.0.1 Description The omarchy-theme-set function allows code execution through the use of third-party themes. This occurs because files placed into the /.local/state/omarchy/current/theme directory may contain...
CVE-2026-81797
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
CVE-2026-57742 WordPress Kids Planet theme <= 2.2.14.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2...
CVE-2026-81797 WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme theme <= 1.0.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
CVE-2026-81797
The Buzz Stone | Magazine & Viral Blog WordPress Theme (versions
EUVD-2026-96531
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...
CVE-2026-78535 WordPress Photolia theme <= 1.0.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Photolia = 1.0.3 versions...
CVE-2026-78533
The Qwery WordPress theme (versions
CVE-2026-78532
The WordPress LMS theme (versions
CVE-2026-78531
The WordPress Jacqueline theme (versions
CVE-2026-66567
The Anesta WordPress theme (versions ≤ 1.5.3 ) is susceptible to an unauthenticated PHP Object Injection vulnerability (CWE-502). The flaw allows for the deserialization of untrusted data , which could lead to high impact on confidentiality, integrity, and availability. No specific exploitation d...
CVE-2026-66567 WordPress Anesta theme <= 1.5.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Anesta = 1.5.3 versions...