CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-62076 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions. | — |
|
2026-10-10 |
| CVE-2026-62054 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions. | — |
|
2026-10-10 |
| CVE-2026-62053 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Wine House <= 3.20 versions. | — |
|
2026-10-10 |
| CVE-2026-62052 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions. | — |
|
2026-10-10 |
| CVE-2026-62051 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions. | — |
|
2026-10-10 |
| CVE-2026-62050 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Splendour <= 1.23 versions. | — |
|
2026-10-10 |
| CVE-2026-62032 | CRITICAL | 9.8 | Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions. | — |
|
2026-10-10 |
| CVE-2026-62031 | CRITICAL | 9.3 | Unauthenticated SQL Injection in uListing <= 2.2.0 versions. | — |
|
2026-10-10 |
| CVE-2026-62025 | CRITICAL | 9.0 | Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions. | — |
|
2026-10-10 |
| CVE-2026-62024 | CRITICAL | 9.9 | Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions. | — |
|
2026-10-10 |
| CVE-2026-62022 | CRITICAL | 9.8 | Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions. | — |
|
2026-10-10 |
| CVE-2026-42723 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions. | — |
|
2026-10-10 |
| CVE-2026-42719 | CRITICAL | 9.8 | Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions. |
T1190
T1203
|
|
2026-10-10 |
| CVE-2026-42718 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions. | — |
|
2026-10-10 |
| CVE-2026-42716 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions. | — |
|
2026-10-10 |
| CVE-2026-42696 | CRITICAL | 10.0 | Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration & Cloning … | — |
|
2026-10-10 |
| CVE-2026-40800 | CRITICAL | 9.3 | Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5… | — |
|
2026-10-10 |
| CVE-2026-39801 | CRITICAL | 9.8 | Subscriber Privilege Escalation in AIWU <= 1.5.9 versions. | — |
|
2026-10-10 |
| CVE-2026-108598 | CRITICAL | 9.8 | Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows un… | — |
|
2026-10-10 |
| CVE-2026-106610 | CRITICAL | 9.8 | Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-ot… | — |
|
2026-10-10 |