CVE-2026-42415

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-39775

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

EUVD-2026-93052

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-42415 WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-42415 WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-42415

The Porto Theme - Functionality plugin for WordPress (versions

CVE-2026-39775 WordPress JobZilla - Job Board WordPress Theme theme <= 2.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

EUVD-2026-93025

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

CVE-2026-39775

The JobZilla - Job Board WordPress Theme (versions

CVE-2026-39775 WordPress JobZilla - Job Board WordPress Theme theme <= 2.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

CVE-2026-39770

The Doctreat WordPress theme, version 1.7.0 and below , is vulnerable to an unauthenticated arbitrary file upload (CWE-434). This vulnerability allows an attacker to upload files with dangerous types to the server. The impact is rated as CRITICAL (CVSS 3.1 score of 10.0), potentially leading to h...

CVE-2026-106509: Improper Control of Generation of Code

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write...

PT-2026-106474

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-42415: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Porto Theme - Functionality = 3.9.3 versions...

CVE-2026-39775: Incorrect Privilege Assignment

Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme = 2.2 versions...

PT-2026-106447

Name of the Vulnerable Software and Affected Versions JobZilla - Job Board WordPress Theme versions prior to 2.3 Description An issue exists that allows a user with Subscriber privileges to escalate their privileges within the system. Recommendations Update JobZilla - Job Board WordPress Theme to...

CVE-2026-105677

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...

CVE-2026-105676

Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. This issue is...

CVE-2026-105677

The Ghost Node.js content management system is vulnerable to Remote Code Execution (RCE) in versions 6.10.3 through 6.64.0 . The root cause lies in the way the software loads theme translation files , which can be exploited by an authenticated Administrator to execute arbitrary code on the server...

CVE-2026-105677 Ghost: Remote Code Execution via Theme Translation Files

Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This issue is fixed in version 6.64.0...