CVE Feed

    Dashboard / CVE

    8.1
    High

    CVE-2026-40755

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-40754

    Last Modified: 17 Jun 2026

    Unauthenticated PHP Object Injection in Roisin <= 1.4 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-40751

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-40739

    Last Modified: 17 Jun 2026

    Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-40736

    Last Modified: 20 Jun 2026

    Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39580

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.

    Published: 16 Jun 2026
    5.5
    Medium

    CVE-2026-39578

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.

    Published: 16 Jun 2026
    5.5
    Medium

    CVE-2026-39577

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39568

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39567

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39557

    Last Modified: 17 Jun 2026

    Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39554

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39549

    Last Modified: 17 Jun 2026

    Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.

    Published: 16 Jun 2026
    7.1
    High

    CVE-2026-39548

    Last Modified: 20 Jun 2026

    Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39547

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Getaway < 1.8 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39539

    Last Modified: 26 Jun 2026

    Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2026-39529

    Last Modified: 20 Jun 2026

    Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39522

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Solene <= 3.4 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39446

    Last Modified: 20 Jun 2026

    Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-39443

    Last Modified: 20 Jun 2026

    Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.

    Published: 16 Jun 2026
    9.3
    Critical

    CVE-2026-39438

    Last Modified: 20 Jun 2026

    Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.

    Published: 16 Jun 2026
    6.5
    Medium

    CVE-2026-39433

    Last Modified: 26 Jun 2026

    Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-34895

    Last Modified: 20 Jun 2026

    Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-34894

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2026-34893

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2026-27429

    Last Modified: 23 Jun 2026

    Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.

    Published: 16 Jun 2026
    9.8
    Critical

    CVE-2026-27395

    Last Modified: 17 Jun 2026

    Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

    Published: 16 Jun 2026
    8.8
    High

    CVE-2026-12256

    Last Modified: 26 Jun 2026

    Contributor PHP Object Injection in Avada <= 3.15.3 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69178

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69177

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69176

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69168

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Spike <= 1.2 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69167

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Eros <= 1.3 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69165

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69163

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69162

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69160

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Gita <= 1.11 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69159

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Printo <= 1.11 versions.

    Published: 16 Jun 2026
    7.1
    High

    CVE-2025-69151

    Last Modified: 17 Jun 2026

    Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69150

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69149

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69147

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Putter <= 1.17 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69146

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Dom <= 1.24 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69143

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Mission <= 1.22 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69142

    Last Modified: 26 Jun 2026

    Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69141

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.

    Published: 16 Jun 2026
    8.6
    High

    CVE-2025-69139

    Last Modified: 17 Jun 2026

    Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.

    Published: 16 Jun 2026
    6.5
    Medium

    CVE-2025-69137

    Last Modified: 23 Jun 2026

    Subscriber Broken Access Control in Genemy <= 1.6.6 versions.

    Published: 16 Jun 2026
    8.1
    High

    CVE-2025-69136

    Last Modified: 23 Jun 2026

    Unauthenticated Local File Inclusion in Wanium <= 1.9.8 versions.

    Published: 16 Jun 2026
    7.5
    High

    CVE-2025-69131

    Last Modified: 23 Jun 2026

    Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.

    Published: 16 Jun 2026