Vulnerability intelligence platform

Know your exposure.
Stay ahead of threats.

Threat intelligence, made actionable Get actionable vulnerability briefings: affected platforms, exploit intelligence, severity, vendor advisories and remediation guidance. Subscribe to the technologies that matter to your environment.

71,345CVEs in selected period
7,809Critical
29,104High
25,214Medium

Explore vulnerabilities

10,047 matching records · 2026-11-05 06:30 IST
Reset filters
CVE-2026-62012CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.

CVE-2026-61997CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.

CVE-2026-61998CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

CVE-2026-62001CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.

CVE-2026-62002CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.

CVE-2026-62003CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Mission <= 1.22 versions.

CVE-2026-61992CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions.

CVE-2026-54859CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Preservation <= 1.15 versions.

CVE-2026-54860CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

CVE-2026-42701HIGH · 7.2
Published 2026-10-29 21:48 IST · Web servers & CMS

Shop manager PHP Object Injection in YayMail <= 4.4.6 versions.

CVE-2026-54856CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

CVE-2026-54857CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.

CVE-2026-54858CRITICAL · 9.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.

CVE-2026-118074HIGH · 7.2
Published 2026-10-29 21:48 IST · Web servers & CMS

Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions.

CVE-2026-118075HIGH · 8.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.

CVE-2026-118076HIGH · 8.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions.

CVE-2026-118077HIGH · 7.2
Published 2026-10-29 21:48 IST · Web servers & CMS

Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions.

CVE-2026-118078HIGH · 7.2
Published 2026-10-29 21:48 IST · Web servers & CMS

Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.

CVE-2026-118080HIGH · 8.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.

CVE-2026-118081HIGH · 8.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions.

CVE-2026-118079HIGH · 7.2
Published 2026-10-29 21:48 IST · Web servers & CMS

Deserialization of Untrusted Data vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Object Injection.This issue affects FV Flowplayer Video Player: from n/a through 7.5.56.7212.

CVE-2026-116864HIGH · 7.2
Published 2026-10-29 21:48 IST · Web servers & CMS

Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions.

CVE-2026-116865HIGH · 7.2
Published 2026-10-29 21:48 IST · Web servers & CMS

Editor PHP Object Injection in Zippy <= 1.7.0 versions.

CVE-2026-116866HIGH · 8.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions.

CVE-2026-116867HIGH · 8.8
Published 2026-10-29 21:48 IST · Web servers & CMS

Contributor PHP Object Injection in Dynamic QR Code &#8211; generator <= 1.0.1 versions.