Search Results (29944 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-52488 2 Wordpress, Zidithemes 2 Wordpress, Grip 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions.
CVE-2025-60205 2 Themerex, Wordpress 2 Themerex Addons, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions.
CVE-2025-60218 2 Wordpress, Wplocker 2 Wordpress, Pt Luxa Addons 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions.
CVE-2025-69129 2 Extendons, Wordpress 3 Wordpress & Woocommerce Scraper Plugin, Wordpress & Woocommerce Scraper Plugin, Import Data From Any Site, Wordpress 2026-06-20 10 Critical
Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.
CVE-2025-69179 2 Theme Passion, Wordpress 2 Support Ticket Management System, Wordpress 2026-06-20 9.8 Critical
Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.
CVE-2026-22327 2 Wordpress, Zozothemes 2 Wordpress, Restaurt 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.
CVE-2026-22340 2 Jobster Marketplace, Wordpress 2 Wpjobster, Wordpress 2026-06-20 9.3 Critical
Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions.
CVE-2026-27041 2 Studio Keren Aga Ltd., Wordpress 2 Unlimited Elements For Elementor (premium), Wordpress 2026-06-20 9.9 Critical
Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions.
CVE-2026-39589 2 A Wp Life, Wordpress 2 Webenvo, Wordpress 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions.
CVE-2026-40725 2 Barn2 Media Ltd, Wordpress 2 Woocommerce Product Filters, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
CVE-2026-40746 2 Themagnifico52, Wordpress 2 Restaurant Zone, Wordpress 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.
CVE-2026-40747 2 Themagnifico52, Wordpress 2 Ecommerce Zone, Wordpress 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.
CVE-2026-40748 2 Themagnifico52, Wordpress 2 Kids Gift Shop, Wordpress 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.
CVE-2026-40749 2 Themagnifico52, Wordpress 2 Charity Zone, Wordpress 2026-06-20 9.9 Critical
Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions.
CVE-2026-42380 2 Jwsthemes, Wordpress 2 Ai Lab, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.
CVE-2026-48875 2 Jetimpex Inc., Wordpress 2 Jetsmartfilters, Wordpress 2026-06-20 9.3 Critical
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.
CVE-2026-49058 2 Loginpress, Wordpress 2 Loginpress Pro, Wordpress 2026-06-20 9.8 Critical
Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions.
CVE-2026-49075 2 Jetimpex Inc., Wordpress 2 Jetengine, Wordpress 2026-06-20 9.8 Critical
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.
CVE-2026-49076 2 Jetimpex Inc., Wordpress 2 Jetengine, Wordpress 2026-06-20 9.3 Critical
Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions.
CVE-2026-49079 2 Jetimpex Inc., Wordpress 2 Jetsearch, Wordpress 2026-06-20 9.3 Critical
Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions.