CVE-2026-65577

WordPress Advice theme,

CVE-2026-65577 WordPress Advice theme <= 1.18.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Advice = 1.18.0 versions...

CVE-2026-65576

CVE-2026-65576 affects WordPress Adrena theme &lt;= 1.2.14. The issue is unauthenticated PHP Object Injection in the theme code, enabling high-impact impact per CVSS 3.1 metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The connected sources confirm the vulnerability exists in Adrena

CVE-2026-65575

CVE-2026-65575 describes an unauthenticated PHP Object Injection affecting the WordPress theme Accalia up to version 1.5.3 . The vulnerability exists in the Accalia theme and exposes a critical impact (CVSSv3.1: 9.8, HIGH for confidentiality, integrity, and availability) with network attack vecto...

EUVD-2026-53994

Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...

EUVD-2026-53993

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

CVE-2026-65575

Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...

CVE-2026-65574 WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Abogado = 1.18 versions...

CVE-2026-65572

The CVE-2026-65572 entry concerns the WordPress A.Williams theme (versions

EUVD-2026-53990

Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...

CVE-2026-65572 WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...

EUVD-2026-53991

Unauthenticated PHP Object Injection in Abelle = 1.22 versions...

CVE-2026-65571 WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...

CVE-2026-65571

Summary: CVE-2026-65571 describes an unauthenticated PHP Object Injection in WordPress 69 Clothing theme, versions

EUVD-2026-53988

Unauthenticated Bypass Vulnerability in Login with phone number = 1.8.70 versions...

CVE-2026-65570

Technical details about CVE-2026-65570 are not publicly available in the provided documents. The records only state an unauthenticated bypass in the WordPress plugin up to version 1.8.70; no specifics on exploit vectors or fixes are included. Monitor for updates.

CVE-2026-65570 WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Login with phone number = 1.8.70 versions...

CVE-2026-65565 WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.3.3 versions...

EUVD-2026-53986

Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.3.3 versions...

EUVD-2026-53985

Unauthenticated Cross Site Scripting XSS in Houzez Property Feed = 2.5.48 versions...