Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Unclassified HIGH 7.5
CVE-2026-57796

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VLThemes Leedo leedo allows …

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57795

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor a…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57794

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-fr…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57793

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allo…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57792

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57791

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Brook brook allows…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57790

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allo…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57789

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows P…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.5
CVE-2026-57788

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allo…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 8.5
CVE-2026-57787

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Bli…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 8.8
CVE-2026-57786

Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Authentication Bypass.This issue affects WorkScout…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57783

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.Thi…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57782

Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57781

Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 6.5
CVE-2026-57780

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Envision Envision Page Builder envision-…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57779

Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…

No fix yet
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57778

Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configure…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57776

Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This is…

Mitigation only
Fix from $1,600 2026-07-13
Unclassified MEDIUM 5.3
CVE-2026-57774

Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels…

No fix yet
Fix from $1,600 2026-07-13
Unclassified HIGH 7.6
CVE-2026-57773

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerc…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 8.5
CVE-2026-57772

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Inventory WP Inventory Manager wp-inventory-…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 8.5
CVE-2026-57771

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-syste…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified CRITICAL 9.8
CVE-2026-57770

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Pho…

Mitigation only
Fix from $2,300 2026-07-13
Unclassified HIGH 8.2
CVE-2026-57768

Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57745

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified CRITICAL 9.8
CVE-2026-57744

Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Them…

Mitigation only
Fix from $2,300 2026-07-13
Unclassified HIGH 8.1
CVE-2026-57743

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensi…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57741

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP News…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified HIGH 7.1
CVE-2026-57740

Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Acce…

Mitigation only
Fix from $1,950 2026-07-13
Unclassified CRITICAL 9.3
CVE-2026-57739

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP News…

Mitigation only
Fix from $2,300 2026-07-13