CVE-2026-66653 | High | 8.1 | 2026-08-13 | Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions. |
CVE-2026-57800 | High | 7.5 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows… |
CVE-2026-57788 | High | 7.5 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Loc… |
CVE-2026-40738 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions. |
CVE-2026-40761 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions. |
CVE-2026-40760 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Behold <= 1.5 versions. |
CVE-2026-40736 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions. |
CVE-2026-40735 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Reina <= 2.1 versions. |
CVE-2026-39539 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions. |
CVE-2026-32512 | Critical | 9.8 | 2026-03-25 | Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pe… |
CVE-2026-32510 | Medium | 5.4 | 2026-03-25 | Deserialization of Untrusted Data vulnerability in Edge-Themes Kamperen kamperen allows Object Injection.This issue affects Kamperen: from n/a through < 1.3. |
CVE-2026-32509 | Medium | 5.4 | 2026-03-25 | Deserialization of Untrusted Data vulnerability in Edge-Themes Gracey gracey allows Object Injection.This issue affects Gracey: from n/a through < 1.4. |
CVE-2026-32506 | Medium | 5.4 | 2026-03-25 | Deserialization of Untrusted Data vulnerability in Edge-Themes Archicon archicon allows Object Injection.This issue affects Archicon: from n/a through < 1.7. |
CVE-2025-69410 | High | 8.1 | 2026-02-20 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allo… |
CVE-2025-69057 | High | 8.1 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Eldon eldon allows PHP Loc… |
CVE-2025-69050 | High | 8.1 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows… |
CVE-2025-68987 | High | 7.5 | 2025-12-30 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Cinerama cinerama allows P… |
CVE-2025-64287 | High | 8.1 | 2025-11-06 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking a… |
CVE-2025-62868 | High | 8.1 | 2025-10-24 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT allows PHP Local… |
CVE-2025-49889 | High | 8.1 | 2025-08-20 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT edge-cpt allows P… |
CVE-2025-3278 | Critical | 9.8 | 2025-04-19 | The UrbanGo Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.4. This is due to the plugin allowing u… |
CVE-2025-1638 | Critical | 9.8 | 2025-03-01 | The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not… |