CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-118081 | HIGH | 8.8 | Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118080 | HIGH | 8.8 | Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118079 | HIGH | 7.2 | Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118078 | HIGH | 7.2 | Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118077 | HIGH | 7.2 | Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118076 | HIGH | 8.8 | Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118075 | HIGH | 8.8 | Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118074 | HIGH | 7.2 | Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-118073 | HIGH | 8.8 | Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116869 | HIGH | 7.2 | Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116868 | HIGH | 8.8 | Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116867 | HIGH | 8.8 | Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116866 | HIGH | 8.8 | Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. |
T1190
T1059
+1
|
|
2026-10-29 |
| CVE-2026-116865 | HIGH | 7.2 | Editor PHP Object Injection in Zippy <= 1.7.0 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116864 | HIGH | 7.2 | Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-116848 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115795 | NONE | — | P-Net before 1.0.3 does not check that a complete block header is present in the received data befor… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115794 | NONE | — | P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable par… |
T1190
T1203
|
|
2026-10-29 |
| CVE-2026-115793 | NONE | — | P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unkno… |
T1078
T1548
|
|
2026-10-29 |
| CVE-2026-114148 | HIGH | 7.8 | Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges lo… |
T1190
T1203
|
|
2026-10-29 |