CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 19:27 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118079 New | FF FV Flowplayer Video Player FolioVision | 7.2 | Oct 29 | WordPress FV Flowplayer Video Player plugin <= 8.3.4 - PHP Object Injection vulnerability |
| CVE-2026-118078 New | PC Product Catalog Feed by PixelYourSite PixelYourSite | 7.2 | Oct 29 | WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability |
| CVE-2026-118077 New | SE Sastra Essential Addons for Elementor Fast Themes | 7.2 | Oct 29 | WordPress Sastra Essential Addons for Elementor plugin <= 1.2.3 - PHP Object Injection vulnerability |
| CVE-2026-118076 New | FP Frisbii Pay Frisbii | 8.8 | Oct 29 | WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability |
| CVE-2026-118075 New | WM WP Media folders dbarrere | 8.8 | Oct 29 | WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability |
| CVE-2026-118074 New | FL Finale Lite Daman Jeet | 7.2 | Oct 29 | WordPress Finale Lite plugin <= 2.21.0 - PHP Object Injection vulnerability |
| CVE-2026-118073 New | NK News Kit Elementor Addons blazethemes | 8.8 | Oct 29 | WordPress News Kit Elementor Addons plugin <= 1.5.0 - PHP Object Injection vulnerability |
| CVE-2026-116869 New | MC myPOS Checkout myPOS Payments | 7.2 | Oct 29 | WordPress myPOS Checkout plugin <= 1.4.5 - PHP Object Injection vulnerability |
| CVE-2026-116868 New | BX BuddyPress Xprofile Custom Field Types BuddyDev | 8.8 | Oct 29 | WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability |
| CVE-2026-116867 New | DQ Dynamic QR Code – generator sosidee | 8.8 | Oct 29 | WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability |
| CVE-2026-116866 New | EF Extra Fees Plugin for WooCommerce Dotstore | 8.8 | Oct 29 | WordPress Extra Fees Plugin for WooCommerce plugin <= 4.4.0 - PHP Object Injection vulnerability |
| CVE-2026-116865 New | ZI Zippy Gesundheit Bewegt GmbH | 7.2 | Oct 29 | WordPress Zippy plugin <= 1.7.0 - PHP Object Injection vulnerability |
| CVE-2026-116864 New | WT WPCargo Track & Trace Arni Cinco | 7.2 | Oct 29 | WordPress WPCargo Track & Trace plugin <= 8.0.5 - PHP Object Injection vulnerability |
| CVE-2026-108494 New | CQ Chained Quiz Bob | 7.1 | Oct 29 | WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-62131 New | ZF Zoho Flow Zoho Flow | 9.8 | Oct 29 | WordPress Zoho Flow plugin <= 2.14.5 - PHP Object Injection vulnerability |
| CVE-2026-62018 New | GU Gunslinger ThemeREX | 9.8 | Oct 29 | WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability |
| CVE-2026-62017 New | GH Good Homes ThemeREX | 9.8 | Oct 29 | WordPress Good Homes theme <= 1.3.13 - PHP Object Injection vulnerability |
| CVE-2026-62016 New | GA Gamic ThemeREX | 9.8 | Oct 29 | WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability |
| CVE-2026-62015 New | GA Gamezone ThemeREX | 9.8 | Oct 29 | WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability |
| CVE-2026-62014 New | EM EmojiNation ThemeREX | 9.8 | Oct 29 | WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability |
| CVE-2026-62013 New | ED Edge Decor ThemeREX | 9.8 | Oct 29 | WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability |
| CVE-2026-62012 New | CO Coinpress ThemeREX | 9.8 | Oct 29 | WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability |
| CVE-2026-62011 New | BO Bonbon ThemeREX | 9.8 | Oct 29 | WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability |
| CVE-2026-62010 New | AV Avventure ThemeREX | 9.8 | Oct 29 | WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability |
| CVE-2026-62009 New | FI Filmax ThemeREX | 9.8 | Oct 29 | WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability |
| CVE-2026-62008 New | OR Orpheus ThemeREX | 9.8 | Oct 29 | WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability |
| CVE-2026-62006 New | NU Nuts ThemeREX | 9.8 | Oct 29 | WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability |
| CVE-2026-62005 New | MU Muzicon ThemeREX | 9.8 | Oct 29 | WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability |
| CVE-2026-62004 New | MO Motorix ThemeREX | 9.8 | Oct 29 | WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability |
| CVE-2026-62003 New | MI Mission ThemeREX | 9.8 | Oct 29 | WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability |
| CVE-2026-62002 New | MW Meals & Wheels ThemeREX | 9.8 | Oct 29 | WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability |
| CVE-2026-62001 New | MA Marcell ThemeREX | 9.8 | Oct 29 | WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability |
| CVE-2026-61998 New | LT Le Truffe ThemeREX | 9.8 | Oct 29 | WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability |
| CVE-2026-61997 New | LS Legal Stone ThemeREX | 9.8 | Oct 29 | WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability |
| CVE-2026-61996 New | MO MLS On The Fly favethemes | 8.5 | Oct 29 | WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability |
| CVE-2026-61995 New | YS YouTube Showcase emarket-design | 7.1 | Oct 29 | WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61993 New | BL Blockonomics blockonomics | 7.1 | Oct 29 | WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61992 New | GM GEO my WordPress Von Eyal Fitoussi | 9.8 | Oct 29 | WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability |
| CVE-2026-61991 New | AC AjaxLoadMore Cache Ajax Load More | 10.0 | Oct 29 | WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability |
| CVE-2026-61989 New | EP Easy Property Listings Merv Barrett | 7.1 | Oct 29 | WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-61988 New | AN Auction Nudge – Your eBay on Your Site morehawes | 7.1 | Oct 29 | WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54866 New | RP Razorpay Payment Button Elementor Plugin Razorpay | 7.1 | Oct 29 | WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54865 New | PC Podamibe Custom User Gravatar Podamibe Nepal | 6.5 | Oct 29 | WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54864 New | PV Post Video Players nicashmu | 7.1 | Oct 29 | WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54860 New | OZ Ozisti ThemeREX | 9.8 | Oct 29 | WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability |
| CVE-2026-54859 New | PR Preservation ThemeREX | 9.8 | Oct 29 | WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability |
| CVE-2026-54858 New | PR Printy ThemeREX | 9.8 | Oct 29 | WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability |
| CVE-2026-54857 New | QU Quirky ThemeREX | 9.8 | Oct 29 | WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability |
| CVE-2026-54856 New | RE RexCoin ThemeREX | 9.8 | Oct 29 | WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability |
| CVE-2026-42701 New | YA YayMail YayCommerce | 7.2 | Oct 29 | WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability |