2026 CVE Vulnerabilities

78,702 CVEs published in 2026.

CVE IDSeverityCVSSDescription
CVE-2026-23546MEDIUM6.5Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme Classified Listing classified-listing all...
CVE-2026-22501CRITICAL9.8Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue af...
CVE-2026-22497CRITICAL9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects J...
CVE-2026-22479HIGH7.5Missing Authorization vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Exploiting Incorrectly...
CVE-2026-22478HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22477HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22476HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22475CRITICAL9.8Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects ...
CVE-2026-22474CRITICAL9.8Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection....
CVE-2026-22473HIGH8.8Deserialization of Untrusted Data vulnerability in designthemes Dental Clinic dental allows Object Injection.This issue ...
CVE-2026-22471HIGH8.8Deserialization of Untrusted Data vulnerability in maximsecudeal Secudeal Payments for Ecommerce secudeal-payments-for-e...
CVE-2026-22467HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mwtemplates DeepDi...
CVE-2026-22465HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen Buddy...
CVE-2026-22460HIGH8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpWax FormGent formgent ...
CVE-2026-22459MEDIUM6.5Missing Authorization vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Exploiting Incorrectly Confi...
CVE-2026-22457HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22456HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22455HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in foreverpinetree Th...
CVE-2026-22454CRITICAL9.8Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects S...
CVE-2026-22453CRITICAL9.8Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects...
CVE-2026-22452HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22451CRITICAL9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This ...
CVE-2026-22449HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22446HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2026-22443HIGH8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...

Check if your code is affected by 2026 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now