418784 matches found
CVE-2026-66480
The YITH WooCommerce Product Add-Ons WordPress plugin (versions ≤ 4.34.0 ) is affected by a Sensitive Data Exposure vulnerability (CWE-497). This flaw allows an attacker to retrieve embedded sensitive data from an unauthorized control sphere. While the specific root cause and impacted components ...
CVE-2026-57742
The Kids Planet WordPress theme (versions n/a through 2.2.14.2 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the Improper Neutralization of Input During Web Page Generation (CWE-79) within the ThemeREX Group theme. This flaw allows an attacker to refle...
CVE-2026-107434
The WordPress MicroPayments plugin versions
CVE-2026-107420
The Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway plugin for WordPress versions
CVE-2026-81797
The Buzz Stone | Magazine & Viral Blog WordPress Theme (versions
CVE-2026-78535
The Photolia WordPress theme (versions
CVE-2026-78534
The Educavo WordPress theme versions
CVE-2026-78533
The Qwery WordPress theme (versions
CVE-2026-78532
The WordPress LMS theme (versions
CVE-2026-78531
The WordPress Jacqueline theme (versions
CVE-2026-78530
The WordPress FoodBakery theme (versions
CVE-2026-78529
The WordPress Alliance theme (versions
CVE-2026-66569
The WordPress Kicker theme (versions
CVE-2026-66568
The WordPress Original theme (versions
CVE-2026-66566
The WordPress Ambient theme (versions
CVE-2026-66567
The Anesta WordPress theme (versions ≤ 1.5.3 ) is susceptible to an unauthenticated PHP Object Injection vulnerability (CWE-502). The flaw allows for the deserialization of untrusted data , which could lead to high impact on confidentiality, integrity, and availability. No specific exploitation d...
CVE-2026-66565
The WordPress FC United theme versions
CVE-2026-66564
The ShiftCV WordPress theme (versions