Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-24972 | 6.5 (v3.1) | WordPress Elated Listing plugin <= 1.4 - Broken Access… |
Elated-Themes |
Elated Listing |
2026-03-25T16:14:33.958Z | 2026-04-28T16:14:51.955Z |
| cve-2026-24971 | 9.8 (v3.1) | WordPress Search & Go theme <= 2.8 - Privilege Escalat… |
Elated-Themes |
Search & Go |
2026-03-25T16:14:33.794Z | 2026-04-28T16:14:52.047Z |
| cve-2026-24970 | 7.7 (v3.1) | WordPress Energox theme <= 1.2 - Arbitrary File Deleti… |
designingmedia |
Energox |
2026-03-25T16:14:33.639Z | 2026-04-28T16:14:51.984Z |
| cve-2026-24969 | 7.7 (v3.1) | WordPress Instant VA theme <= 1.0.1 - Arbitrary File D… |
designingmedia |
Instant VA |
2026-03-25T16:14:33.459Z | 2026-04-28T16:14:51.951Z |
| cve-2026-24968 | 9.8 (v3.1) | WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Esc… |
Xagio SEO |
Xagio SEO |
2026-03-25T16:14:33.279Z | 2026-04-28T16:14:51.921Z |
| cve-2026-24964 | 6.4 (v3.1) | WordPress Contest Gallery plugin <= 28.1.2.1 - Server … |
Wasiliy Strecker / ContestGallery developer |
Contest Gallery |
2026-03-25T16:14:33.077Z | 2026-04-28T16:14:51.965Z |
| cve-2026-24391 | 7.1 (v3.1) | WordPress Car Dealer theme <= 1.6.7 - Reflected Cross … |
ThemeMakers |
Car Dealer |
2026-03-25T16:14:32.850Z | 2026-04-28T16:14:48.536Z |
| cve-2026-24382 | 7.5 (v3.1) | WordPress News Magazine X theme <= 1.2.50 - Broken Acc… |
wproyal |
News Magazine X |
2026-03-25T16:14:32.688Z | 2026-04-28T16:14:48.412Z |
| cve-2026-24378 | 9.8 (v3.1) | WordPress EventPrime plugin <= 4.2.8.0 - PHP Object In… |
Metagauss |
EventPrime |
2026-03-25T16:14:32.518Z | 2026-04-28T16:14:48.361Z |
| cve-2026-24376 | 6.5 (v3.1) | WordPress WPVulnerability plugin <= 4.2.1 - Broken Acc… |
Javier Casares |
WPVulnerability |
2026-03-25T16:14:32.352Z | 2026-04-28T16:14:48.339Z |
| cve-2026-24373 | 8.1 (v3.1) | WordPress RegistrationMagic plugin <= 6.0.7.1 - Accoun… |
Metagauss |
RegistrationMagic |
2026-03-25T16:14:32.185Z | 2026-04-28T16:14:48.184Z |
| cve-2026-24372 | 7.5 (v3.1) | WordPress Subscriptions for WooCommerce plugin <= 1.8.… |
WP Swings |
Subscriptions for WooCommerce |
2026-03-25T16:14:32.017Z | 2026-04-29T09:51:56.675Z |
| cve-2026-24370 | 6.5 (v3.1) | WordPress The Grid plugin < 2.8.0 - Cross Site Scripti… |
Theme-one |
The Grid |
2026-03-25T16:14:31.861Z | 2026-04-28T16:14:48.301Z |
| cve-2026-24369 | 7.1 (v3.1) | WordPress The Grid plugin < 2.8.0 - Broken Access Cont… |
Theme-one |
The Grid |
2026-03-25T16:14:31.699Z | 2026-04-28T16:14:48.326Z |
| cve-2026-24364 | 6.5 (v3.1) | WordPress WP User Frontend plugin <= 4.2.5 - Broken Ac… |
weDevs |
WP User Frontend |
2026-03-25T16:14:31.531Z | 2026-04-28T16:14:47.895Z |
| cve-2026-24363 | 7.5 (v3.1) | WordPress WP Cost Estimation & Payment Forms Builder p… |
loopus |
WP Cost Estimation & Payment Forms Builder |
2026-03-25T16:14:31.370Z | 2026-04-28T16:14:48.378Z |
| cve-2026-24362 | 6.4 (v3.1) | WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken … |
bdthemes |
Ultimate Post Kit |
2026-03-25T16:14:31.201Z | 2026-04-28T16:14:48.017Z |
| cve-2026-24359 | 8.8 (v3.1) | WordPress Dokan plugin <= 4.2.4 - Broken Authenticatio… |
Dokan, Inc. |
Dokan |
2026-03-25T16:14:31.035Z | 2026-04-28T16:14:47.818Z |
| cve-2026-23979 | 7.1 (v3.1) | WordPress Gyan Elements plugin <= 2.2.1 - Reflected Cr… |
Softwebmedia |
Gyan Elements |
2026-03-25T16:14:30.832Z | 2026-04-28T16:14:47.357Z |
| cve-2026-23977 | 7.5 (v3.1) | WordPress Helpdesk Support Ticket System for WooCommer… |
WPFactory |
Helpdesk Support Ticket System for WooCommerce |
2026-03-25T16:14:30.616Z | 2026-04-28T16:14:47.290Z |
| cve-2026-23973 | 7.1 (v3.1) | WordPress Golo theme < 1.7.5 - Reflected Cross Site Sc… |
uxper |
Golo |
2026-03-25T16:14:30.420Z | 2026-04-28T16:14:47.484Z |
| cve-2026-23972 | 6.5 (v3.1) | WordPress Booking and Rental Manager plugin <= 2.6.0 -… |
magepeopleteam |
Booking and Rental Manager |
2026-03-25T16:14:30.153Z | 2026-04-28T16:14:47.260Z |
| cve-2026-23971 | 8.1 (v3.1) | WordPress WoodMart theme <= 8.3.8 - PHP Object Injecti… |
xtemos |
WoodMart |
2026-03-25T16:14:29.883Z | 2026-04-28T16:14:47.256Z |
| cve-2026-23807 | 7.1 (v3.1) | WordPress WP Telegram Widget and Join Link plugin <= 2… |
WP Socio |
WP Telegram Widget and Join Link |
2026-03-25T16:14:29.657Z | 2026-04-28T16:14:47.237Z |
| cve-2026-23806 | 7.5 (v3.1) | WordPress Jobs for WordPress plugin <= 2.8 - Broken Ac… |
BlueGlass Interactive AG |
Jobs for WordPress |
2026-03-25T16:14:29.327Z | 2026-04-28T16:14:47.302Z |
| cve-2026-22524 | 7.1 (v3.1) | WordPress Legacy Admin plugin <= 9.5 - Reflected Cross… |
themepassion |
Legacy Admin |
2026-03-25T16:14:29.032Z | 2026-04-28T17:23:50.712Z |
| cve-2026-22523 | 7.1 (v3.1) | WordPress Ultra WordPress Admin plugin <= 11.7 - Refle… |
themepassion |
Ultra WordPress Admin |
2026-03-25T16:14:28.779Z | 2026-04-28T17:23:42.192Z |
| cve-2026-22520 | 7.1 (v3.1) | WordPress Handmade Framework plugin <= 3.9 - Reflected… |
G5Theme |
Handmade Framework |
2026-03-25T16:14:28.517Z | 2026-04-28T17:23:33.783Z |
| cve-2026-22516 | 8.1 (v3.1) | WordPress Wizor's theme <= 2.12 - Local File Inclusion… |
AncoraThemes |
Wizor's |
2026-03-25T16:14:28.255Z | 2026-04-28T17:23:24.778Z |
| cve-2026-22515 | 8.1 (v3.1) | WordPress VegaDays theme <= 1.2.0 - Local File Inclusi… |
AncoraThemes |
VegaDays |
2026-03-25T16:14:27.982Z | 2026-04-28T17:23:16.262Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2016-avi-299 | Multiples vulnérabilités dans Wireshark | 2016-09-08T00:00:00.000000 | 2016-09-08T00:00:00.000000 |
| certfr-2016-avi-298 | Multiples vulnérabilités dans WordPress | 2016-09-08T00:00:00.000000 | 2016-09-08T00:00:00.000000 |
| certfr-2016-avi-297 | Multiples vulnérabilités dans Google Android (Nexus) | 2016-09-07T00:00:00.000000 | 2016-09-07T00:00:00.000000 |
| certfr-2016-avi-296 | Multiples vulnérabilités dans SCADA Siemens SIPROTEC 4 et SIPROTEC Compact | 2016-09-06T00:00:00.000000 | 2016-09-06T00:00:00.000000 |
| certfr-2016-avi-295 | Multiples vulnérabilités dans les pare-feux Cisco | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-294 | Multiples vulnérabilités dans les produits Apple | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-293 | Multiples vulnérabilités dans Google Chrome | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-292 | Multiples vulnérabilités dans Apache OpenOffice | 2016-09-05T00:00:00.000000 | 2016-09-05T00:00:00.000000 |
| certfr-2016-avi-291 | Multiples vulnérabilités dans les produits Cisco | 2016-09-02T00:00:00.000000 | 2016-09-02T00:00:00.000000 |
| certfr-2016-avi-290 | Vulnérabilité dans Adobe ColdFusion | 2016-08-31T00:00:00.000000 | 2016-08-31T00:00:00.000000 |
| certfr-2016-avi-289 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2016-08-30T00:00:00.000000 | 2016-08-30T00:00:00.000000 |
| certfr-2016-avi-288 | Multiples vulnérabilités dans Apple iOS | 2016-08-26T00:00:00.000000 | 2016-08-26T00:00:00.000000 |
| certfr-2016-avi-287 | Vulnérabilité dans les noyaux Linux de Red Hat | 2016-08-24T00:00:00.000000 | 2016-08-24T00:00:00.000000 |
| certfr-2016-avi-286 | Multiples vulnérabilités dans les produits VMware | 2016-08-24T00:00:00.000000 | 2016-08-24T00:00:00.000000 |
| certfr-2016-avi-285 | Multiples vulnérabilités dans les produits NVIDIA | 2016-08-22T00:00:00.000000 | 2016-08-22T00:00:00.000000 |
| certfr-2016-avi-284 | Multiples vulnérabilités dans les produits Cisco | 2016-08-18T00:00:00.000000 | 2016-08-23T00:00:00.000000 |
| certfr-2016-avi-283 | Vulnérabilité dans le micrologiciel Fortigate de Fortinet | 2016-08-18T00:00:00.000000 | 2016-08-23T00:00:00.000000 |
| certfr-2016-avi-282 | Multiples vulnérabilités dans les produits VMware | 2016-08-18T00:00:00.000000 | 2016-08-18T00:00:00.000000 |
| certfr-2016-avi-281 | Multiples vulnérabilités dans PostgreSQL | 2016-08-12T00:00:00.000000 | 2016-08-12T00:00:00.000000 |
| certfr-2016-avi-280 | Multiples vulnérabilités dans les produits F5 BIG-IP | 2016-08-12T00:00:00.000000 | 2016-08-12T00:00:00.000000 |
| certfr-2016-avi-279 | Multiples vulnérabilités dans OpenSSH | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-278 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-277 | Vulnérabilité dans Huawei Unified Security Gateway | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-276 | Vulnérabilité dans les produits Huawei | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-275 | Multiples vulnérabilités dans les noyaux Linux de Red Hat | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-274 | Vulnérabilité dans Xen QEMU | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-273 | Multiples vulnérabilités dans la bibliothèque GNU C (glibc) | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-272 | Multiples vulnérabilités dans le noyau Linux d'Oracle | 2016-08-11T00:00:00.000000 | 2016-08-11T00:00:00.000000 |
| certfr-2016-avi-271 | Multiples vulnérabilités dans Microsoft Windows | 2016-08-10T00:00:00.000000 | 2016-08-10T00:00:00.000000 |
| certfr-2016-avi-270 | Multiples vulnérabilités dans Microsoft Office | 2016-08-10T00:00:00.000000 | 2016-08-10T00:00:00.000000 |