CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-62012WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerabilityThemeREX Coinpress
- CVE-2026-62011WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerabilityThemeREX Bonbon
- CVE-2026-62010WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerabilityThemeREX Avventure
- CVE-2026-62009WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerabilityThemeREX Filmax
- CVE-2026-62008WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerabilityThemeREX Orpheus
- CVE-2026-62006WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerabilityThemeREX Nuts
- CVE-2026-62005WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerabilityThemeREX Muzicon
- CVE-2026-62004WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerabilityThemeREX Motorix
- CVE-2026-62003WordPress Mission theme <= 1.22 - PHP Object Injection vulnerabilityThemeREX Mission
- CVE-2026-62002WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerabilityThemeREX Meals & Wheels
- CVE-2026-62001WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerabilityThemeREX Marcell
- CVE-2026-61998WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerabilityThemeREX Le Truffe
- CVE-2026-61997WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerabilityThemeREX Legal Stone
- CVE-2026-61996WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerabilityfavethemes MLS On The Fly
- CVE-2026-61995WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerabilityemarket-design YouTube Showcase
- CVE-2026-61993WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerabilityBlockonomics
- CVE-2026-61992WordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerabilityVon Eyal Fitoussi GEO my WordPress
- CVE-2026-61991WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerabilityAjax Load More AjaxLoadMore Cache
- CVE-2026-61989WordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerabilityMerv Barrett Easy Property Listings
- CVE-2026-61988WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerabilitymorehawes Auction Nudge – Your eBay on Your Site
- CVE-2026-54866WordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerabilityRazorpay Payment Button Elementor Plugin
- CVE-2026-54865WordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilityPodamibe Nepal Podamibe Custom User Gravatar
- CVE-2026-54864WordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerabilitynicashmu Post Video Players
- CVE-2026-54860WordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerabilityThemeREX Ozisti
- CVE-2026-54859WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerabilityThemeREX Preservation
- CVE-2026-54858WordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerabilityThemeREX Printy
- CVE-2026-54857WordPress Quirky theme <= 1.23 - PHP Object Injection vulnerabilityThemeREX Quirky
- CVE-2026-54856WordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerabilityThemeREX RexCoin
- CVE-2026-42701WordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerabilityYayCommerce YayMail
- CVE-2026-42692WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilityThemeum WP Crowdfunding