7.1

CVSS3.1

CVE-2026-25304 - WordPress Jaroti theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/a through < 1.4.8.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 26, 2026, 11:39 a.m.

9.8

CVSS3.1

CVE-2026-25035 - WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 27, 2026, 9:46 a.m.

6.5

CVSS3.1

CVE-2026-25034 - WordPress KiviCare plugin <= 3.6.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiviCare: from n/a through <= 3.6.16.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 27, 2026, 9:46 a.m.

7.1

CVSS3.1

CVE-2026-25033 - WordPress Motta Addons plugin < 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uixthemes Motta Addons motta-addons allows Reflected XSS.This issue affects Motta Addons: from n/a through < 1.6.1.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 26, 2026, 11:39 a.m.

9.8

CVSS3.1

CVE-2026-25032 - WordPress Ricky theme < 2.31 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in park_of_ideas Ricky ricky allows Object Injection.This issue affects Ricky: from n/a through < 2.31.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 27, 2026, 9:46 a.m.

9.8

CVSS3.1

CVE-2026-25031 - WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in park_of_ideas Tasty Daily tastydaily allows Object Injection.This issue affects Tasty Daily: from n/a through < 1.27.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 27, 2026, 9:46 a.m.

9.8

CVSS3.1

CVE-2026-25030 - WordPress Goldish theme < 3.47 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in park_of_ideas Goldish goldish allows Object Injection.This issue affects Goldish: from n/a through < 3.47.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 27, 2026, 9:46 a.m.

9.8

CVSS3.1

CVE-2026-25029 - WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in park_of_ideas KIDZ kidz allows Object Injection.This issue affects KIDZ: from n/a through <= 5.24.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 27, 2026, 9:46 a.m.

7.5

CVSS3.1

CVE-2026-25026 - WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through <= 5.0.11.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 27, 2026, 8:26 p.m.

7.1

CVSS3.1

CVE-2026-25025 - WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRestaurants vikrestaurants allows Reflected XSS.This issue affects VikRestaurants: from n/a through <= 1.5.2.

📅 Published: March 25, 2026, 4:14 p.m. 🔄 Last Modified: March 26, 2026, 11:39 a.m.
Total resulsts: 341070
Page 89 of 34,107
« previous page » next page
Filters