Browse CVEs

HIGH 7.5 CVE-2026-57796 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VLThemes Leedo leedo allows … Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57795 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor a… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57794 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-fr… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57793 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allo… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57792 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57791 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Brook brook allows… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57790 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Billey billey allo… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57789 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows P… Mitigation only Fix from $1,9502026-07-13 HIGH 7.5 CVE-2026-57788 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allo… Mitigation only Fix from $1,9502026-07-13 HIGH 8.5 CVE-2026-57787 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Bli… Mitigation only Fix from $1,9502026-07-13 HIGH 8.8 CVE-2026-57786 Cross-Site Request Forgery (CSRF) vulnerability in purethemes WorkScout-Core workscout-core allows Authentication Bypass.This issue affects WorkScout… Mitigation only Fix from $1,9502026-07-13 MEDIUM 6.5 CVE-2026-57783 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Speaker speaker allows Stored XSS.Thi… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57782 Missing Authorization vulnerability in PressTigers Universal Clocks universal-clocks allows Exploiting Incorrectly Configured Access Control Security… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57781 Missing Authorization vulnerability in Sovlix MeetingHub meetinghub allows Exploiting Incorrectly Configured Access Control Security Levels.This issu… Mitigation only Fix from $1,6002026-07-13 MEDIUM 6.5 CVE-2026-57780 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Envision Envision Page Builder envision-… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57779 Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… No fix yet Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57778 Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configure… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57776 Missing Authorization vulnerability in vowelweb VW Wedding vw-wedding allows Exploiting Incorrectly Configured Access Control Security Levels.This is… Mitigation only Fix from $1,6002026-07-13 MEDIUM 5.3 CVE-2026-57774 Missing Authorization vulnerability in vowelweb VW Food Corner vw-food-corner allows Exploiting Incorrectly Configured Access Control Security Levels… No fix yet Fix from $1,6002026-07-13 HIGH 7.6 CVE-2026-57773 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zorem Advanced Shipment Tracking for WooCommerc… Mitigation only Fix from $1,9502026-07-13 HIGH 8.5 CVE-2026-57772 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Inventory WP Inventory Manager wp-inventory-… Mitigation only Fix from $1,9502026-07-13 HIGH 8.5 CVE-2026-57771 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Rating System gd-rating-syste… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.8 CVE-2026-57770 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Pho… Mitigation only Fix from $2,3002026-07-13 HIGH 8.2 CVE-2026-57768 Incorrect Privilege Assignment vulnerability in favethemes Houzez Login Register houzez-login-register allows Privilege Escalation.This issue affects… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57745 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.8 CVE-2026-57744 Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Object Injection.This issue affects RT-Them… Mitigation only Fix from $2,3002026-07-13 HIGH 8.1 CVE-2026-57743 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 | Extensi… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57741 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP News… Mitigation only Fix from $1,9502026-07-13 HIGH 7.1 CVE-2026-57740 Missing Authorization vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Exploiting Incorrectly Configured Acce… Mitigation only Fix from $1,9502026-07-13 CRITICAL 9.3 CVE-2026-57739 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AcyMailing Newsletter Team AcyMailing SMTP News… Mitigation only Fix from $2,3002026-07-13