Skip to content
OpenAdvisories

Archive

16 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /16 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

549 results · Feed

  • High 7.1
    CVE-2026-39548

    WordPress MagOne theme <= 9.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions.

    Sneeit MagOne
  • High 8.1
    CVE-2026-39547

    WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Getaway < 1.8 versions.

    Select-Themes Getaway
  • Critical 9.8
    CVE-2026-39529

    WordPress Elementra theme <= 1.0.9 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions.

    ThemeREX Elementra
  • High 8.1
    CVE-2026-39539

    WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

    Edge-Themes Alloggio - Hotel Booking
  • High 8.1
    CVE-2026-39522

    WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Solene <= 3.4 versions.

    Elated-Themes Solene
  • High 8.1
    CVE-2026-39443

    WordPress EmallShop theme <= 2.4.21 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in EmallShop <= 2.4.21 versions.

    PressLayouts EmallShop
  • High 8.1
    CVE-2026-39446

    WordPress Kapee theme < 1.7.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.

    PressLayouts Kapee
  • Critical 9.3
    CVE-2026-39438

    WordPress ListingPro plugin <= 2.9.10 - SQL Injection vulnerability

    Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions.

    Emraan Cheema ListingPro
  • High 8.1
    CVE-2026-34895

    WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Softlab Core < 1.2.11 versions.

    WebGeniusLab Softlab Core
  • Medium 6.5
    CVE-2026-39433

    WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerability

    Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.

    mojoomla WPAMS
  • High 8.1
    CVE-2026-34893

    WordPress Thegov Core plugin < 2.0.23 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Thegov Core < 2.0.23 versions.

    WebGeniusLab Thegov Core
  • High 8.1
    CVE-2026-34894

    WordPress Integrio Core plugin < 1.2.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Integrio Core < 1.2.8 versions.

    WebGeniusLab Integrio Core
  • Critical 9.8
    CVE-2026-27429

    WordPress Nifty theme <= 1.4.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions.

    Bold Themes Nifty
  • Critical 9.8
    CVE-2026-27395

    WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions.

    Schiocco Support Board
  • High 8.8
    CVE-2026-12256

    WordPress Fusion Builder plugin <= 3.15.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeFusion Fusion Builder fusion-builder allows Object Injection.This issue affects Fusion Builder: from n/a through 3.15.3.

    ThemeFusion Fusion Builder
  • High 8.1
    CVE-2025-69178

    WordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.

    CactusThemes Truemag
  • High 8.1
    CVE-2025-69177

    WordPress Roneous theme <= 2.1.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Roneous <= 2.1.5 versions.

    THEMELOGI Roneous
  • High 8.1
    CVE-2025-69176

    WordPress ITactics theme <= 1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in ITactics <= 1.0 versions.

    ThemeREX ITactics
  • High 8.1
    CVE-2025-69168

    WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Spike <= 1.2 versions.

    ThemeREX Spike
  • High 8.1
    CVE-2025-69165

    WordPress Choreo theme <= 1.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Choreo <= 1.6 versions.

    ThemeREX Choreo
  • High 8.1
    CVE-2025-69167

    WordPress Eros theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Eros <= 1.3 versions.

    ThemeREX Eros
  • High 8.1
    CVE-2025-69163

    WordPress WineShop theme <= 3.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in WineShop <= 3.17 versions.

    ThemeREX WineShop
  • High 8.1
    CVE-2025-69162

    WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Grecko <= 5.17 versions.

    ThemeREX Grecko
  • High 8.1
    CVE-2025-69160

    WordPress Gita theme <= 1.11 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Gita <= 1.11 versions.

    ThemeREX Gita
  • High 8.1
    CVE-2025-69159

    WordPress Printo theme <= 1.11 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Printo <= 1.11 versions.

    ThemeREX Printo
  • High 8.1
    CVE-2025-69150

    WordPress Medeus theme <= 1.14 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Medeus <= 1.14 versions.

    ThemeREX Medeus
  • High 7.1
    CVE-2025-69151

    WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Grand Car Rental <= 3.7 versions.

    ThemeGoods Grand Car Rental
  • High 8.1
    CVE-2025-69149

    WordPress Top Dog theme <= 1.0.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Top Dog <= 1.0.5 versions.

    ThemeREX Top Dog
  • High 8.1
    CVE-2025-69146

    WordPress Dom theme <= 1.24 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Dom <= 1.24 versions.

    ThemeREX Dom
  • High 8.1
    CVE-2025-69147

    WordPress Putter theme <= 1.17 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Putter <= 1.17 versions.

    ThemeREX Putter
  • High 8.1
    CVE-2025-69143

    WordPress Mission theme <= 1.22 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Mission <= 1.22 versions.

    ThemeREX Mission
  • High 8.1
    CVE-2025-69142

    WordPress Abelle theme <= 1.22 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Abelle <= 1.22 versions.

    ThemeREX Abelle
  • High 8.1
    CVE-2025-69141

    WordPress Kelly Young theme <= 1.1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kelly Young <= 1.1.0 versions.

    ThemeREX Kelly Young
  • High 8.6
    CVE-2025-69139

    WordPress Car Zone theme <= 3.7 - Arbitrary File Deletion vulnerability

    Unauthenticated Arbitrary File Deletion in Car Zone <= 3.7 versions.

    AivahThemes Car Zone
  • Medium 6.5
    CVE-2025-69137

    WordPress Genemy theme <= 1.6.6 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Genemy <= 1.6.6 versions.

    Jthemes Genemy
  • High 8.1
    CVE-2025-69136

    WordPress Wanium theme <= 1.9.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Wanium <= 1.9.8 versions.

    THEMELOGI Wanium
  • High 7.5
    CVE-2025-69131

    WordPress WordPress & WooCommerce Scraper Plugin, Import Data from Any Site plugin <= 1.0.7 - Arbitrary File Download vulnerability

    Unauthenticated Arbitrary File Download in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.

    extendons WordPress & WooCommerce Scraper Plugin, Import Data from Any Site Web / CMS
  • High 8.1
    CVE-2025-69125

    WordPress Food Drop theme <= 1.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Food Drop <= 1.3 versions.

    ThemeREX Food Drop
  • High 8.1
    CVE-2025-69124

    WordPress Especio theme <= 1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Especio <= 1.0 versions.

    ThemeREX Especio
  • Critical 9.8
    CVE-2025-69122

    WordPress SeaFood Company theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions.

    ThemeREX SeaFood Company