The archive.

CVE-2026-25340 · NooTheme Jobmonster

WordPress Jobmonster theme < 4.8.4 - SQL Injection vulnerability

GalleryCreator1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-25345 · GalleryCreator SimpLy Gallery

WordPress SimpLy Gallery plugin <= 3.3.2 - Arbitrary Code Execution vulnerability

EPSS 0.5%CVSS 9.9

Metagauss1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-24378 · Metagauss EventPrime

WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability

Sonarr1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-30975 · Sonarr Sonarr

Sonarr Authentication Bypass vulnerability

ThemeREX3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-27084 · ThemeREX Buisson

WordPress Buisson theme <= 1.1.11 - PHP Object Injection vulnerability

CVE-2026-27082 · ThemeREX Love Story

WordPress Love Story theme <= 1.3.12 - PHP Object Injection vulnerability

CVE-2026-27083 · ThemeREX Work & Travel Company

WordPress Work & Travel Company theme <= 1.2 - PHP Object Injection vulnerability

IBM1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-14917 · IBM WebSphere Application Server - Liberty

IBM WebSphere Application Server Liberty could provide weaker than expected security

Wasiliy Strecker / ContestGallery developer1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-25035 · Wasiliy Strecker / ContestGallery developer Contest Gallery

WordPress Contest Gallery plugin <= 28.1.2.2 - Account Takeover vulnerability

Xagio SEO1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-24968 · Xagio SEO Xagio SEO

WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability

Edge-Themes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-32512 · Edge-Themes Pelicula

WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability

FantasticPlugins1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-24989 · FantasticPlugins SUMO Affiliates Pro

WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability

magepeopleteam1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-27095 · magepeopleteam Bus Ticket Booking with Seat Reservation

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability

park_of_ideas4 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-25029 · park_of_ideas KIDZ

WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability

CVE-2026-25030 · park_of_ideas Goldish

WordPress Goldish theme < 3.47 - PHP Object Injection vulnerability

CVE-2026-25031 · park_of_ideas Tasty Daily

WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability

CVE-2026-25032 · park_of_ideas Ricky

WordPress Ricky theme < 2.31 - PHP Object Injection vulnerability

Select-Themes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-32502 · Select-Themes Borgholm

WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerability

wpdive1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-25429 · wpdive Nexa Blocks

WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability

Andrew Munro / AffiliateWP1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-32520 · Andrew Munro / AffiliateWP RewardsWP

WordPress RewardsWP plugin <= 1.0.4 - Privilege Escalation vulnerability

denishua1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-32523 · denishua WPJAM Basic

WordPress WPJAM Basic plugin <= 6.9.2 - Arbitrary File Upload vulnerability

deothemes1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-32482 · deothemes Ona

WordPress Ona theme < 1.24 - Arbitrary File Upload vulnerability

Elated-Themes1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-24971 · Elated-Themes Search & Go

WordPress Search & Go theme <= 2.8 - Privilege Escalation vulnerability

iqonicdesign1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-25413 · iqonicdesign WPBookit Pro

WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability

Themeisle1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-25366 · Themeisle Woody ad snippets

WordPress Woody ad snippets plugin <= 2.7.1 - Remote Code Execution (RCE) vulnerability

uxper1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-27051 · uxper Golo

WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability

halfdata1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-32536 · halfdata Green Downloads

WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability

HYPR1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-2414 · HYPR Server

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from…

jetmonsters1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-32525 · jetmonsters JetFormBuilder

WordPress JetFormBuilder plugin <= 3.5.6.1 - Remote Code Execution (RCE) vulnerability

TotalSuite1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-27044 · TotalSuite Total Poll Lite

WordPress Total Poll Lite plugin <= 4.12.0 - Remote Code Execution (RCE) vulnerability

Bit Apps1 vulnerability on this pageMax CVSS 9.0Priority 33KEV 0

CVE-2026-32519 · Bit Apps Bit SMTP

WordPress Bit SMTP plugin <= 1.2.2 - Broken Authentication vulnerability

EPSS 0.4%CVSS 9.0

Jordy Meow1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-32524 · Jordy Meow Photo Engine

WordPress Photo Engine plugin <= 6.4.9 - Arbitrary File Upload vulnerability

Arraytics1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-27071 · Arraytics WPCafe

WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability

Devteam HaywoodTech1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-31920 · Devteam HaywoodTech Product Rearrange for WooCommerce

WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - SQL Injection vulnerability

eyecix1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-25377 · eyecix Addon Jobsearch Chat

WordPress Addon Jobsearch Chat plugin <= 3.0 - SQL Injection vulnerability

Jonathan Daggerhart1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-25447 · Jonathan Daggerhart Widget Wrangler

WordPress Widget Wrangler plugin <= 2.3.9 - Remote Code Execution (RCE) vulnerability

King-Theme1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-25371 · King-Theme Lumise Product Designer

WordPress Lumise Product Designer plugin < 2.0.9 - SQL Injection vulnerability

Nelio Software1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-32573 · Nelio Software Nelio AB Testing

WordPress Nelio AB Testing plugin <= 8.2.7 - Remote Code Execution (RCE) vulnerability

QuantumCloud1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-32499 · QuantumCloud ChatBot

WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability

WPFactory1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-24993 · WPFactory Advanced WooCommerce Product Sales Reporting

WordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.3 - SQL Injection vulnerability

PublishPress1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-32539 · PublishPress PublishPress Revisions

WordPress PublishPress Revisions plugin <= 3.7.23 - SQL Injection vulnerability