Skip to content
OpenAdvisories

Archive

5 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /5 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-10580 Public exploit Scanner template

    Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API

    The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to and including 1.9.4. This is due to a logic conflation in HippooPermissions::get_user_permissions…

    hippooo Hippoo Mobile App for WooCommerce Web / CMS
  • Critical 9.3
    CVE-2026-46395 Public exploit

    HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation

    HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` function in the HAXcms Node.js backend contains two critical cryptographic implementation errors that together allow any unauthenticated attacker …

    haxtheweb haxcms-nodejs @haxtheweb/haxcms-nodejs npm
  • Critical 9.0
    CVE-2026-45746 Public exploit

    Termix Vulnerable to Arbitrary Command Execution via Session Hijacking

    Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix contains a critical Broken Access Control vulnerability due to improper validation o…

    Termix-SSH Termix
  • Critical 9.8
    CVE-2026-6274 Public exploit

    Authentication Bypass in DTS Electronics' Redline WR3200

    Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline …

    DTS Electronics Industry and Trade Ltd. Co. Redline WR3200
  • Critical 10.0
    CVE-2026-49777 Public exploit Scanner template

    WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

    Improper Validation of Specified Quantity in Input vulnerability in ShapedPlugin, LLC Product Slider Pro for WooCommerce allows Malicious Software Implanted. This issue affects Product Slider Pro for WooCommerce: from n/a before 3.5.4.

    ShapedPlugin Product Slider Pro for WooCommerce Web / CMS
  • Critical 10.0
    CVE-2026-48907 Exploited Public exploit Scanner template EPSS 85%

    Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

    A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

    joomlacontenteditor.net Joomla Content Editor (JCE) extension for Joomla Web / CMS
    KEV Jun 16, 2026