CVE Vulnerability Database
Search and browse 424,958 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-93937 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects... |
| CVE-2026-93936 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affec... |
| CVE-2026-93935 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This iss... |
| CVE-2026-93934 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue aff... |
| CVE-2026-93933 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue... |
| CVE-2026-93932 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This iss... |
| CVE-2026-93931 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects... |
| CVE-2026-93930 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affec... |
| CVE-2026-93929 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue a... |
| CVE-2026-93927 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto... |
| CVE-2026-93746 | HIGH | 7.5 | 0.5% | Oct 10, 2026 | The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerab... |
| CVE-2026-62046 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue... |
| CVE-2026-62045 | CRITICAL | 9.8 | 0.3% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This iss... |
| CVE-2026-108504 | MEDIUM | 5.5 | 0.1% | Oct 10, 2026 | ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framew... |
| CVE-2026-106606 | HIGH | 7.2 | 0.4% | Oct 10, 2026 | Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows O... |
| CVE-2026-104803 | CRITICAL | 9.8 | 0.4% | Oct 10, 2026 | The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.2... |
| CVE-2026-104759 | HIGH | 8.1 | 0.5% | Oct 10, 2026 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentic... |
| CVE-2026-104728 | MEDIUM | 4.3 | 0.3% | Oct 10, 2026 | The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulner... |
| CVE-2026-103478 | MEDIUM | 6.4 | 0.3% | Oct 10, 2026 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting ... |
| CVE-2026-102774 | MEDIUM | 6.4 | 0.3% | Oct 10, 2026 | The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site S... |
| CVE-2026-102291 | MEDIUM | 5.4 | 0.3% | Oct 10, 2026 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcod... |
| CVE-2026-101921 | MEDIUM | 4.7 | 0.3% | Oct 10, 2026 | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPres... |
| CVE-2026-101920 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | The Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress plugin for WordPress is vulnerable to S... |
| CVE-2026-100178 | HIGH | 7.2 | 0.4% | Oct 10, 2026 | The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'adverts_lo... |
| CVE-2026-100147 | HIGH | 7.2 | 0.3% | Oct 10, 2026 | The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |