418603 matches found
CVE-2026-100147
The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.16.0.5 . The root cause is insufficient input sanitization and output escaping associated with the 'shipping_first_name' parameter....
CVE-2026-96563
The Motors – Car Dealership & Classified Listings plugin for WordPress (versions up to and including 1.4.123 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping involving the 'stm_f_s' parameter. This flaw allows authenticat...
CVE-2026-96278
The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 9.3.03.002 . The root cause is insufficient input sanitization and output escaping within the REQUEST_URI Session History functionality. Specifically, the esc_url_raw() ...
CVE-2026-108504
The ZTE Z80 Ultra product contains an unauthorized information disclosure vulnerability due to insufficient access control for methods within the framework. An attacker can exploit this flaw to read device-related information . No specific remediation steps or exploit details are provided in the ...
CVE-2026-62045
The Booklovers WordPress theme (versions
CVE-2026-93942
The ThemeREX Group Dwell WordPress theme (versions
CVE-2026-93945
The Axiomthemes Balance WordPress theme (versions
CVE-2026-62046
The Gutentype theme for WordPress (versions
CVE-2026-93944
The ThemeREX Group Camelia WordPress theme (versions
CVE-2026-93943
The Convex WordPress theme by ThemeREX Group, versions up to and including 1.16.0 , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which can allow an attacker to execute arbitrary code or perform unauthorized actions. The vulnerability ...
CVE-2026-93937
The WordPress Hygia theme (versions
CVE-2026-93941
The ThemeREX Group Edema WordPress theme is affected by a PHP Object Injection vulnerability (CWE-502) in versions up to and including 1.2.2.2 . The root cause is the deserialization of untrusted data , which allows an attacker to achieve object injection. This vulnerability has a CRITICAL base s...
CVE-2026-93940
The ThemeREX Group Greeny WordPress theme (versions
CVE-2026-93938
The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...
CVE-2026-93934
The ThemeREX Group Partiso WordPress theme is vulnerable to a PHP Object Injection vulnerability in versions up to and including 1.1.13 . This issue stems from the deserialization of untrusted data , which can allow an attacker to inject objects into the application. The impact is rated as CRITIC...
CVE-2026-93936
The WordPress IPharm theme (versions
CVE-2026-93935
The ThemeREX Group Let's Play WordPress theme (versions
CVE-2026-93931
The Smash theme by ThemeREX Group for WordPress is vulnerable to a PHP Object Injection vulnerability in versions