CVE Feed

    Dashboard / CVE

    7.1
    High

    CVE-2026-39548

    Last Modified: 20 Jun 2026

    Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39547

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Getaway < 1.8 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39539

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2026-39529

    Last Modified: 20 Jun 2026

    Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39522

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Solene <= 3.4 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39446

    Last Modified: 20 Jun 2026

    Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39443

    Last Modified: 20 Jun 2026

    Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.

    Published: 16 Jun 2026
    9.3
    Critical

    CVE-2026-39438

    Last Modified: 20 Jun 2026

    Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.

    Published: 16 Jun 2026
    6.5
    Medium

    CVE-2026-39433

    Last Modified: 26 Jun 2026

    Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-34895

    Last Modified: 20 Jun 2026

    Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-34894

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-34893

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2026-27429

    Last Modified: 23 Jun 2026

    Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2026-27395

    Last Modified: 17 Jun 2026

    Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

    Published: 16 Jun 2026
    8.8
    High

    CVE-2026-12256

    Last Modified: 1 Oct 2026

    Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69178

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69177

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69176

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69168

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Spike <= 1.2 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69167

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Eros <= 1.3 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69165

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69163

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69162

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69160

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Gita <= 1.11 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69159

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Printo <= 1.11 versions.

    Published: 16 Jun 2026
    7.1
    High

    CVE-2025-69151

    Last Modified: 17 Jun 2026

    Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69150

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69149

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69147

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Putter <= 1.17 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69146

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Dom <= 1.24 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69143

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Mission <= 1.22 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69142

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69141

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.

    Published: 16 Jun 2026
    8.6
    High

    CVE-2025-69139

    Last Modified: 17 Jun 2026

    Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.

    Published: 16 Jun 2026
    6.5
    Medium

    CVE-2025-69137

    Last Modified: 23 Jun 2026

    Subscriber Broken Access Control in Genemy <= 1.6.6 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69136

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Wanium <= 1.9.8 versions.

    Published: 16 Jun 2026
    7.5
    High

    CVE-2025-69131

    Last Modified: 23 Jun 2026

    Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69125

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69124

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Especio <= 1.0 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2025-69122

    Last Modified: 23 Jun 2026

    Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69121

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Deliciosa <= 1.10.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69119

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Corbesier <= 1.15.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69118

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in CopyPress <= 1.4.5 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69116

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Iona <= 1.0.8 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69114

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in MaxiNet <= 1.2.10 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69113

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Nexio <= 1.10.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69112

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Planty <= 1.14.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69109

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Raider Spirit <= 1.1.2 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2025-69108

    Last Modified: 6 Oct 2026

    Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69107

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Rosaleen <= 2.8 versions.

    Published: 16 Jun 2026