CVE Database

161468+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2026-66568
9.8 CRITICAL

Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.

Oct 10, 2026
CVE-2026-66567
9.8 CRITICAL

Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.

Oct 10, 2026
CVE-2026-66566
8.1 HIGH

Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

Oct 10, 2026
CVE-2026-66565
9.8 CRITICAL

Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.

Oct 10, 2026
CVE-2026-66564
9.8 CRITICAL

Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.

Oct 10, 2026
CVE-2026-66563
9.8 CRITICAL

Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

Oct 10, 2026
CVE-2026-66483
9.8 CRITICAL

Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

Oct 10, 2026
CVE-2026-66482
9.8 CRITICAL

Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.

Oct 10, 2026
CVE-2026-66481
6.8 MEDIUM

Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.

Oct 10, 2026
CVE-2026-66480
5.3 MEDIUM

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects …

Oct 10, 2026
CVE-2026-65459
7.5 HIGH

Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.

Oct 10, 2026
CVE-2026-62130
7.2 HIGH

Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.

Oct 10, 2026
CVE-2026-62129
9.9 CRITICAL

Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.

Oct 10, 2026
CVE-2026-62125
9.8 CRITICAL

Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.

Oct 10, 2026
CVE-2026-62124
9.8 CRITICAL

Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.

Oct 10, 2026
CVE-2026-62123
9.8 CRITICAL

Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.

Oct 10, 2026
CVE-2026-62120
9.8 CRITICAL

Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.

Oct 10, 2026
CVE-2026-62118
7.3 HIGH

Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

Oct 10, 2026
CVE-2026-62117
8.5 HIGH

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

Oct 10, 2026
CVE-2026-62116
7.1 HIGH

Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

Oct 10, 2026
CVE-2026-62115
8.1 HIGH

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

Oct 10, 2026
CVE-2026-62100
7.1 HIGH

Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

Oct 10, 2026
CVE-2026-62099
8.1 HIGH

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

Oct 10, 2026
CVE-2026-62098
6.5 MEDIUM

Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

Oct 10, 2026
CVE-2026-62096
8.1 HIGH

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

Oct 10, 2026
CVE-2026-62095
7.1 HIGH

Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

Oct 10, 2026
CVE-2026-62094
8.1 HIGH

Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

Oct 10, 2026
CVE-2026-62093
7.1 HIGH

Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

Oct 10, 2026
CVE-2026-62092
8.1 HIGH

Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

Oct 10, 2026
CVE-2026-62091
7.1 HIGH

Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

Oct 10, 2026
CVE-2026-62090
9.8 CRITICAL

Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.

Oct 10, 2026
CVE-2026-62087
9.8 CRITICAL

Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.

Oct 10, 2026
CVE-2026-62086
9.8 CRITICAL

Unauthenticated PHP Object Injection in Juno <= 2.25 versions.

Oct 10, 2026
CVE-2026-62082
7.1 HIGH

Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.

Oct 10, 2026
CVE-2026-62077
9.8 CRITICAL

Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.

Oct 10, 2026
CVE-2026-62076
9.8 CRITICAL

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

Oct 10, 2026
CVE-2026-62075
8.1 HIGH

Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.

Oct 10, 2026
CVE-2026-62074
8.1 HIGH

Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

Oct 10, 2026
CVE-2026-62070
8.1 HIGH

Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.

Oct 10, 2026
CVE-2026-62069
8.1 HIGH

Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.

Oct 10, 2026
CVE-2026-62068
8.1 HIGH

Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.

Oct 10, 2026
CVE-2026-62067
8.1 HIGH

Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.

Oct 10, 2026
CVE-2026-62066
8.1 HIGH

Unauthenticated Local File Inclusion in Volos <= 1.2 versions.

Oct 10, 2026
CVE-2026-62065
8.1 HIGH

Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.

Oct 10, 2026
CVE-2026-62064
7.1 HIGH

Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.

Oct 10, 2026
CVE-2026-62054
9.8 CRITICAL

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

Oct 10, 2026
CVE-2026-62053
9.8 CRITICAL

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

Oct 10, 2026
CVE-2026-62052
9.8 CRITICAL

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.

Oct 10, 2026
CVE-2026-62051
9.8 CRITICAL

Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.

Oct 10, 2026
CVE-2026-62050
9.8 CRITICAL

Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.

Oct 10, 2026

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.

Website Scanner Port Scanner

Patch and protect

Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.

Compare VPS prices →
Sucuri Sucuri → Website firewall, malware cleanup & monitoring NordPass NordPass → Password manager with breach alerts Malwarebytes Malwarebytes → Anti-malware for Windows, Mac and phones, 25% off Contabo Contabo → Cheap VPS & dedicated servers, EU/US/Asia
DigitalOcean DigitalOcean → Developer cloud: Droplets, managed databases, S3 storage NordVPN NordVPN → Hide your IP, servers in 120+ countries Surfshark Surfshark → Unlimited devices, from ~$2/mo

Affiliate links: we may earn a commission, your price stays the same.