8.8

CVSS3.1

CVE-2026-25400 - WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in thememount Apicona apicona allows Object Injection.This issue affects Apicona: from n/a through <= 24.1.0.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

6.5

CVSS3.1

CVE-2026-25398 - WordPress Vertex Addons for Elementor plugin <= 1.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webilia Inc. Vertex Addons for Elementor addons-for-elementor-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vertex Addons for Elementor: from n/a through <= 1.6.4.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

7.5

CVSS3.1

CVE-2026-25397 - WordPress File Uploader for WooCommerce plugin <= 1.0.4 - Path Traversal vulnerability

Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through <= 1.0.4.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

7.5

CVSS3.1

CVE-2026-25396 - WordPress Commerce Coinbase For WooCommerce plugin <= 1.6.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in CoderPress Commerce Coinbase For WooCommerce commerce-coinbase-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Commerce Coinbase For WooCommerce: from n/a through <= 1.6.6.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

6.5

CVSS3.1

CVE-2026-25390 - WordPress New User Approve plugin <= 3.2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 3.2.3.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

7.1

CVSS3.1

CVE-2026-25383 - WordPress KiviCare plugin <= 3.6.16 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Reflected XSS.This issue affects KiviCare: from n/a through <= 3.6.16.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

8.1

CVSS3.1

CVE-2026-25382 - WordPress IdealAuto theme < 3.8.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes IdealAuto idealauto allows PHP Local File Inclusion.This issue affects IdealAuto: from n/a through < 3.8.6.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

8.1

CVSS3.1

CVE-2026-25381 - WordPress LoveDate theme < 3.8.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes LoveDate lovedate allows PHP Local File Inclusion.This issue affects LoveDate: from n/a through < 3.8.6.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

8.1

CVSS3.1

CVE-2026-25380 - WordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Feedy feedy allows PHP Local File Inclusion.This issue affects Feedy: from n/a through < 2.1.5.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.

8.1

CVSS3.1

CVE-2026-25379 - WordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/a through < 6.8.6.

๐Ÿ“… Published: March 25, 2026, 4:14 p.m. ๐Ÿ”„ Last Modified: March 30, 2026, 1:27 p.m.
Total resulsts: 341926
Page 170 of 34,193
ยซ previous page ยป next page
Filters