Search
545 CVEs · published 2026-10-29 to 2026-10-29
CVEs (545, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 176–200 of 545 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-62009 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. | |
| CVE-2026-62008 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions. | |
| CVE-2026-62006 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Nuts <= 1.12 versions. | |
| CVE-2026-62005 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. | |
| CVE-2026-62004 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. | |
| CVE-2026-62003 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Mission <= 1.22 versions. | |
| CVE-2026-62002 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions. | |
| CVE-2026-62001 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions. | |
| CVE-2026-61998 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. | |
| CVE-2026-61997 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. | |
| CVE-2026-61996 | HIGH | 8.5 | 2026-10-29 | Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | |
| CVE-2026-61995 | HIGH | 7.1 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. | |
| CVE-2026-61993 | HIGH | 7.1 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | |
| CVE-2026-61992 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. | |
| CVE-2026-61991 | CRITICAL | 10.0 | 2026-10-29 | Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. | |
| CVE-2026-61989 | HIGH | 7.1 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. | |
| CVE-2026-61988 | HIGH | 7.1 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions. | |
| CVE-2026-54866 | HIGH | 7.1 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions. | |
| CVE-2026-54865 | MEDIUM | 6.5 | 2026-10-29 | Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. | |
| CVE-2026-54864 | HIGH | 7.1 | 2026-10-29 | Unauthenticated Cross Site Scripting (XSS) in Post Video Players <= 1.165 versions. | |
| CVE-2026-54860 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions. | |
| CVE-2026-54859 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Preservation <= 1.15 versions. | |
| CVE-2026-54858 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions. | |
| CVE-2026-54857 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Quirky <= 1.23 versions. | |
| CVE-2026-54856 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions. |