Lucene search
+L

323278 matches found

Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•40 views

CVE-2026-62066 WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Volos = 1.2 versions...

8.1CVSS0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/10 7:35 p.m.•8 views

CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•43 views

CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

9.8CVSS0.00375EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•45 views

CVE-2026-62038 WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...

7.3CVSS0.00267EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•16 views

CVE-2026-62038

The eRoom WordPress plugin versions

7.3CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/10 7:35 p.m.•9 views

CVE-2026-62038 WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in eRoom = 1.7.1 versions...

7.3CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/10 7:35 p.m.•10 views

CVE-2026-62035 WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

6.3CVSS5.8AI score0.00249EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:35 p.m.•12 views

EUVD-2026-96470

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

6.3CVSS5.8AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•18 views

CVE-2026-62035

The AWS S3 for WordPress Plugin (specifically the Upcasted version) is vulnerable to a Broken Access Control issue in versions

6.3CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•44 views

CVE-2026-62035 WordPress AWS S3 for WordPress Plugin – Upcasted plugin <= 3.1.0 - Broken Access Control vulnerability

Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted = 3.1.0 versions...

6.3CVSS0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/10 7:35 p.m.•10 views

CVE-2026-62037 WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Document Embedder = 2.4.0 versions...

7.1CVSS5.7AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•40 views

CVE-2026-62030 WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in StreamCast = 2.4.5 versions...

7.2CVSS0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•14 views

CVE-2026-62030

The StreamCast WordPress plugin versions

7.2CVSS5.8AI score0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•18 views

CVE-2026-62025

The Tailored Tools plugin for WordPress (versions

9CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•46 views

CVE-2026-62022 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Tonda Membership = 1.0.1 versions...

9.8CVSS0.00321EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•42 views

CVE-2026-62021 WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in Angio = 1.1.1 versions...

8.8CVSS0.00468EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/10 7:35 p.m.•6 views

CVE-2026-48194 WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in DukaMarket = 1.3.0 versions...

8.1CVSS5.8AI score0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/10 7:35 p.m.•8 views

CVE-2026-42723 WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in CleanSkin = 1.5.0 versions...

9.8CVSS5.8AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•24 views

CVE-2026-42717

The WordPress Leyka plugin (versions

7.6CVSS5.8AI score0.00279EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/10 7:35 p.m.•8 views

CVE-2026-42717 WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

Administrator SQL Injection in Leyka = 3.32.3 versions...

7.6CVSS5.8AI score0.00279EPSS
SaveExploits0References1
Rows per page
Query Builder