Skip to content
OpenAdvisories

Archive

15 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /15 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-12087 Public exploit

    Socket versions before 2.041 for Perl have an out-of-bounds heap read

    Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argum…

    PEVANS Socket perl perl Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2026-49105 Public exploit

    WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.

    CRM Perks WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
  • Critical 9.8
    CVE-2026-49104 Public exploit

    WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions.

    CRM Perks Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
  • Critical 9.8
    CVE-2026-49085 Public exploit

    WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.

    CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
  • Critical 9.3
    CVE-2026-39492 Public exploit

    WordPress WP Maps plugin <= 4.9.1 - SQL Injection vulnerability

    Unauthenticated SQL Injection in WP Maps <= 4.9.1 versions.

    Flipper Code – WordPress Development Company WP Maps
  • Critical 9.8
    CVE-2026-9691 Public exploit

    WordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.1 versions.

    CRM Perks Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms
  • Critical 9.1
    CVE-2026-49952 Public exploit Scanner template

    Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

    Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality by exploiting a shared cryptographic key betw…

    Discuz! Discuz! X5.0
  • Critical 9.8
    CVE-2026-38812 Public exploit

    RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint. The issue affects the code generati…