Skip to content
OpenAdvisories

Source

ENISA EU Vulnerability Database

Source: https://euvd.enisa.europa.eu/

All Critical High Medium Low Exploited only Public exploit

97,140 results · Clear filters · Feed

  • High 7.3
    CVE-2026-62118

    WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

    Dmitry V. Barcode Scanner with Inventory & Order Manager
  • High 8.5
    CVE-2026-62117

    WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability

    Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

    Dmitry V. Barcode Scanner with Inventory & Order Manager
  • High 7.1
    CVE-2026-62116

    WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

    Dmitry V. Barcode Scanner with Inventory & Order Manager
  • High 7.1
    CVE-2026-62100

    WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

    kutethemes KuteShop
  • High 8.1
    CVE-2026-62115

    WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

    kutethemes KuteShop
  • High 8.1
    CVE-2026-62099

    WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

    kutethemes Boutique
  • High 7.1
    CVE-2026-62095

    WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

    kutethemes Biolife
  • High 8.1
    CVE-2026-62096

    WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

    kutethemes Biolife
  • High 8.1
    CVE-2026-62094

    WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

    kutethemes TechOne
  • High 7.1
    CVE-2026-62093

    WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

    kutethemes TechOne
  • High 7.1
    CVE-2026-62091

    WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

    kutethemes Armania
  • High 8.1
    CVE-2026-62092

    WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

    kutethemes Armania
  • High 7.1
    CVE-2026-62082

    WordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.

    An-Themes Pin WP
  • High 8.1
    CVE-2026-62075

    WordPress Backhoe theme <= 2.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.

    Mymoun Backhoe
  • High 8.1
    CVE-2026-62074

    WordPress Ozeum theme <= 1.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

    ThemeREX Ozeum
  • High 8.1
    CVE-2026-62070

    WordPress Flipmart theme <= 2.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.

    CKThemes Flipmart
  • High 8.1
    CVE-2026-62068

    WordPress Teoro theme <= 1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.

    CocoBasic Teoro
  • High 8.1
    CVE-2026-62069

    WordPress Fabius theme <= 1.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.

    CocoBasic Fabius
  • High 8.1
    CVE-2026-62067

    WordPress Kaven theme <= 1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.

    CocoBasic Kaven
  • High 8.1
    CVE-2026-62066

    WordPress Volos theme <= 1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Volos <= 1.2 versions.

    CocoBasic Volos
  • High 8.1
    CVE-2026-62065

    WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.

    CocoBasic Cardea
  • High 7.1
    CVE-2026-62064

    WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.

    bracketweb Ambed
  • High 7.5
    CVE-2026-62043

    WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.

    sevenspark Contact Form 7 – Dynamic Text Extension
  • High 7.3
    CVE-2026-62038

    WordPress eRoom plugin <= 1.7.1 - Broken Authentication vulnerability

    Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions.

    DigitalME eRoom
  • High 7.1
    CVE-2026-62037

    WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.

    bPlugins Document Embedder
  • High 7.1
    CVE-2026-62034

    WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions.

    bPlugins Before After Image Comparison – Image comparison for WP
  • High 7.6
    CVE-2026-62033

    WordPress uListing plugin <= 2.2.0 - Settings Change vulnerability

    Subscriber Settings Change in uListing <= 2.2.0 versions.

    stylemix uListing
  • High 7.2
    CVE-2026-62030

    WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability

    Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.

    bPlugins StreamCast
  • High 7.1
    CVE-2026-62027

    WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions.

    bPlugins Team Section Block
  • High 8.8
    CVE-2026-62021

    WordPress Angio theme <= 1.1.1 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

    rascals Angio
  • High 8.1
    CVE-2026-62020

    WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.

    Mikado-Themes TouchUp
  • High 8.1
    CVE-2026-48194

    WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

    kutethemes DukaMarket
  • High 8.1
    CVE-2026-48193

    WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

    kutethemes Uminex
  • High 7.6
    CVE-2026-45440

    WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability

    Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.

    Smackcoders WP Ultimate CSV Importer
  • High 8.1
    CVE-2026-42724

    WordPress CleanSkin theme <= 1.5.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.

    AncoraThemes CleanSkin
  • High 8.1
    CVE-2026-42777

    WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

    Edge-Themes Aalto
  • High 7.6
    CVE-2026-42722

    WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - SQL Injection vulnerability

    Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.

    Shabti Kaplan Frontend Admin by DynamiApps
  • High 7.6
    CVE-2026-42717

    WordPress Leyka plugin <= 3.32.3 - SQL Injection vulnerability

    Administrator SQL Injection in Leyka <= 3.32.3 versions.

    VaultDweller Leyka
  • High 7.1
    CVE-2026-42715

    WordPress Photo Gallery by 10Web plugin <= 1.8.47 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.

    10web Photo Gallery by 10Web
  • High 8.5
    CVE-2026-42712

    WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

    Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

    QODE Qode Tours