Search
Search Results (29944 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-52488 | 2 Wordpress, Zidithemes | 2 Wordpress, Grip | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions. | ||||
| CVE-2025-60205 | 2 Themerex, Wordpress | 2 Themerex Addons, Wordpress | 2026-06-20 | 9.8 Critical |
| Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions. | ||||
| CVE-2025-60218 | 2 Wordpress, Wplocker | 2 Wordpress, Pt Luxa Addons | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions. | ||||
| CVE-2025-69129 | 2 Extendons, Wordpress | 3 Wordpress & Woocommerce Scraper Plugin, Wordpress & Woocommerce Scraper Plugin, Import Data From Any Site, Wordpress | 2026-06-20 | 10 Critical |
| Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions. | ||||
| CVE-2025-69179 | 2 Theme Passion, Wordpress | 2 Support Ticket Management System, Wordpress | 2026-06-20 | 9.8 Critical |
| Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions. | ||||
| CVE-2026-22327 | 2 Wordpress, Zozothemes | 2 Wordpress, Restaurt | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions. | ||||
| CVE-2026-22340 | 2 Jobster Marketplace, Wordpress | 2 Wpjobster, Wordpress | 2026-06-20 | 9.3 Critical |
| Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions. | ||||
| CVE-2026-27041 | 2 Studio Keren Aga Ltd., Wordpress | 2 Unlimited Elements For Elementor (premium), Wordpress | 2026-06-20 | 9.9 Critical |
| Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. | ||||
| CVE-2026-39589 | 2 A Wp Life, Wordpress | 2 Webenvo, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. | ||||
| CVE-2026-40725 | 2 Barn2 Media Ltd, Wordpress | 2 Woocommerce Product Filters, Wordpress | 2026-06-20 | 9.8 Critical |
| Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions. | ||||
| CVE-2026-40746 | 2 Themagnifico52, Wordpress | 2 Restaurant Zone, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. | ||||
| CVE-2026-40747 | 2 Themagnifico52, Wordpress | 2 Ecommerce Zone, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. | ||||
| CVE-2026-40748 | 2 Themagnifico52, Wordpress | 2 Kids Gift Shop, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. | ||||
| CVE-2026-40749 | 2 Themagnifico52, Wordpress | 2 Charity Zone, Wordpress | 2026-06-20 | 9.9 Critical |
| Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. | ||||
| CVE-2026-42380 | 2 Jwsthemes, Wordpress | 2 Ai Lab, Wordpress | 2026-06-20 | 9.8 Critical |
| Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions. | ||||
| CVE-2026-48875 | 2 Jetimpex Inc., Wordpress | 2 Jetsmartfilters, Wordpress | 2026-06-20 | 9.3 Critical |
| Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions. | ||||
| CVE-2026-49058 | 2 Loginpress, Wordpress | 2 Loginpress Pro, Wordpress | 2026-06-20 | 9.8 Critical |
| Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions. | ||||
| CVE-2026-49075 | 2 Jetimpex Inc., Wordpress | 2 Jetengine, Wordpress | 2026-06-20 | 9.8 Critical |
| Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions. | ||||
| CVE-2026-49076 | 2 Jetimpex Inc., Wordpress | 2 Jetengine, Wordpress | 2026-06-20 | 9.3 Critical |
| Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions. | ||||
| CVE-2026-49079 | 2 Jetimpex Inc., Wordpress | 2 Jetsearch, Wordpress | 2026-06-20 | 9.3 Critical |
| Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions. | ||||