CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118080 | HIGH | 8.8 | Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118079 | HIGH | 7.2 | Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118078 | HIGH | 7.2 | Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118077 | HIGH | 7.2 | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118076 | HIGH | 8.8 | Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118075 | HIGH | 8.8 | Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118074 | HIGH | 7.2 | Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118073 | HIGH | 8.8 | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116869 | HIGH | 7.2 | Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116868 | HIGH | 8.8 | Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116867 | HIGH | 8.8 | Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116866 | HIGH | 8.8 | Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-116865 | HIGH | 7.2 | Editor PHP Object Injection in Zippy <= 1.7.0 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116864 | HIGH | 7.2 | Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-114148 | HIGH | 7.8 | Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges lo… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110309 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitra… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-110245 | HIGH | 7.5 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information … |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-110244 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitiv… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-110196 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authentica… |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-110193 | HIGH | 8.8 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authentica… |
T1190
T1059
+1
|
|
2026-10-29 |