Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10424 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-39529 2 Themerex Group, Wordpress 2 Elementra, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.
CVE-2026-40736 2 Edge-themes, Wordpress 2 Laurits, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.
CVE-2026-40760 2 Edge-themes, Wordpress 2 Behold, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Behold <= 1.5 versions.
CVE-2026-40761 2 Edge-themes, Wordpress 2 Valeska, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.
CVE-2026-39545 2 Select-themes, Wordpress 2 Zermatt, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.
CVE-2026-39573 2 Select-themes, Wordpress 2 Mildhill, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.
CVE-2026-40725 2 Barn2 Media Ltd, Wordpress 2 Woocommerce Product Filters, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.
CVE-2026-40753 2 Mikado-themes, Wordpress 2 Easymeals, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.
CVE-2026-42380 2 Jwsthemes, Wordpress 2 Ai Lab, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions.
CVE-2026-49075 2 Jetimpex Inc., Wordpress 2 Jetengine, Wordpress 2026-06-20 9.8 Critical
Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions.
CVE-2026-52706 2 Jetimpex Inc., Wordpress 2 Jetengine, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions.
CVE-2026-11857 1 Quanos Solutions 1 Schema St4 2026-06-20 N/A
Quanos SCHEMA ST4 on-premises contains a local privilege escalation vulnerability in the Client Update Service due to insecure deserialization in the .NET Remoting service. The service is configured with TypeFilterLevel.Full and is bound to local interfaces only through named pipes. A local authenticated attacker can connect to the local named pipe, obtain the .NET Remoting endpoint, and send specially crafted serialized objects. Successful exploitation results in arbitrary code execution in the context of the update process with NT AUTHORITY\SYSTEM privileges. Network-only exploitation is not possible and local host access with an authenticated user session is required.
CVE-2026-39445 2 Presslayouts, Wordpress 2 Alukas, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Alukas < 3.0.0 versions.
CVE-2026-40738 2 Edge-themes, Wordpress 2 Eldon, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.
CVE-2026-40752 2 Select-themes, Wordpress 2 Manufaktur Solutions, Wordpress 2026-06-20 8.1 High
Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions.
CVE-2026-49108 2 Park Of Ideas, Wordpress 2 Moderno, Wordpress 2026-06-20 9.8 Critical
Unauthenticated PHP Object Injection in Moderno < 1.43 versions.
CVE-2025-60229 2 Themeton, Wordpress 2 Lagom, Wordpress 2026-06-20 9.8 Critical
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0.
CVE-2025-60230 2 Themeton, Wordpress 2 The Barber Shop, Wordpress 2026-06-20 9.8 Critical
Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9.
CVE-2025-60231 2 Emv, Wordpress 2 The Hospital, Wordpress 2026-06-20 9.8 Critical
Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8.1.
CVE-2025-60236 2 Emv, Wordpress 2 Creatify, Wordpress 2026-06-20 9.8 Critical
Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5.