21556 matches found
PT-2026-69931
Name of the Vulnerable Software and Affected Versions Typemill CMS versions 2.x Description A persistent cross-site scripting issue exists in the Markdown parser extension. Authenticated users with theme-configuration access can inject malicious JavaScript URIs by providing unsanitized href value...
Malicious code in postcss-theme-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d6afcada49b5397e1b4d6a41d4ec0b31903593e65219c919e0d310d3941a40 packages/core/src/index.ts and plugin.ts compiled into dist/index.cjs referenced by main contain a top-level async IIFE that executes on require of t...
MAL-2026-13518 Malicious code in postcss-theme-provider (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d6afcada49b5397e1b4d6a41d4ec0b31903593e65219c919e0d310d3941a40 packages/core/src/index.ts and plugin.ts compiled into dist/index.cjs referenced by main contain a top-level async IIFE that executes on require of t...
WordPress Blogfolio theme <=3.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Blogfolio versions =3.0.5...
CVE-2026-66681
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
EUVD-2026-53893
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66681
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66681
Theme My Login WordPress plugin
CVE-2026-65581 WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65581 WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI ANN = 1.29.0 versions...
CVE-2026-65581
The CVE-�2026-65581 entry concerns the WordPress AI ANN theme (<= 1.29.0) and describes an unauthenticated PHP Object Injection vulnerability. The connected documents corroborate the affected product and version range, with a focus on PHP object injection as the underlying issue. There are no ...
CVE-2026-65579
CVE-2026-65579 describes an unauthenticated PHP Object Injection in the WordPress Agricola theme up to version 1.21.0. The affected component is the Agricola WordPress theme; the root cause is a PHP object injection vulnerability, enabling an attacker to achieve total compromise without authentic...
CVE-2026-65578 WordPress Agora theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agora = 1.9 versions...
CVE-2026-65579 WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65579 WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agricola = 1.21.0 versions...
CVE-2026-65578
The CVE-2026-65578 entry describes an unauthenticated PHP Object Injection in the WordPress Agora theme versions up to 1.9. The vulnerability affects the Agora WordPress theme (≤ 1.9) and arises from a PHP object injection flaw, leading to potentially full system compromise without authentication...