278527 matches found
CVE-2026-65576
CVE-2026-65576 affects WordPress Adrena theme <= 1.2.14. The issue is unauthenticated PHP Object Injection in the theme code, enabling high-impact impact per CVSS 3.1 metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The connected sources confirm the vulnerability exists in Adrena
CVE-2026-65575
CVE-2026-65575 describes an unauthenticated PHP Object Injection affecting the WordPress theme Accalia up to version 1.5.3 . The vulnerability exists in the Accalia theme and exposes a critical impact (CVSSv3.1: 9.8, HIGH for confidentiality, integrity, and availability) with network attack vecto...
CVE-2026-65575 WordPress Accalia theme <= 1.5.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Accalia = 1.5.3 versions...
CVE-2026-65576 WordPress Adrena theme <= 1.2.14 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Adrena = 1.2.14 versions...
CVE-2026-65574 WordPress Abogado theme <= 1.18 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CVE-2026-65574
Affected software: WordPress Abogado theme, version(s)
CVE-2026-65573 WordPress Abelle theme <= 1.22 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Abelle = 1.22 versions...
CVE-2026-65572 WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in A.Williams = 1.3.1 versions...
CVE-2026-65572
The CVE-2026-65572 entry concerns the WordPress A.Williams theme (versions
CVE-2026-65573
CVE-2026-65573 is an unauthenticated PHP Object Injection vulnerability affecting the WordPress theme Abelle in versions 1.22 and earlier . The connected documents consistently describe the issue as a PHP Object Injection vulnerability that does not require authentication, with impact metrics ind...
CVE-2026-65571 WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in 69 Clothing = 1.2.11.1 versions...
CVE-2026-65571
Summary: CVE-2026-65571 describes an unauthenticated PHP Object Injection in WordPress 69 Clothing theme, versions
CVE-2026-65569
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
EUVD-2026-53987
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
CVE-2026-65569
CVE-2026-65569 affects the WordPress WP Job Portal plugin
CVE-2026-65570
Technical details about CVE-2026-65570 are not publicly available in the provided documents. The records only state an unauthenticated bypass in the WordPress plugin up to version 1.8.70; no specifics on exploit vectors or fixes are included. Monitor for updates.
CVE-2026-65570 WordPress Login with phone number plugin <= 1.8.70 - Bypass vulnerability vulnerability
Unauthenticated Bypass Vulnerability in Login with phone number = 1.8.70 versions...
CVE-2026-65569 WordPress WP Job Portal plugin <= 2.5.6 - SQL Injection vulnerability
Subscriber SQL Injection in WP Job Portal = 2.5.6 versions...
CVE-2026-65565 WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Survey Maker = 5.2.3.3 versions...
CVE-2026-65565
CVE-2026-65565 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Survey Maker plugin up to version 5.2.3.3. The initial data provides CVSSv3.1 base score 7.1 (HIGH) with NETWORK attack vector, LOW impact on confidentiality/integrity/availability, and user inte...