CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CRITICAL9.8 |
Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions. |
| 29/10/2026 |
| CVE-2026-62004 | CRITICAL9.8 | Unauthenticated PHP Object Injection in Motorix <= 1.11 versions. | 29/10/2026 |
| CVE-2026-62003 | CRITICAL9.8 | Unauthenticated PHP Object Injection in Mission <= 1.22 versions. | 29/10/2026 |
| CVE-2026-62002 | CRITICAL9.8 | Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions. | 29/10/2026 |
| CVE-2026-62001 | CRITICAL9.8 | Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions. | 29/10/2026 |
| CVE-2026-61998 | CRITICAL9.8 | Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions. | 29/10/2026 |
| CVE-2026-61997 | CRITICAL9.8 | Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions. | 29/10/2026 |
| CVE-2026-61996 | HIGH8.5 | Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions. | 29/10/2026 |
| CVE-2026-61995 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions. | 29/10/2026 |
| CVE-2026-61993 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions. | 29/10/2026 |
| CVE-2026-61992 | CRITICAL9.8 | Unauthenticated PHP Object Injection in GEO my WordPress <= 4.5.5.3 versions. | 29/10/2026 |
| CVE-2026-61991 | CRITICAL10.0 | Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions. | 29/10/2026 |
| CVE-2026-61989 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings <= 3.5.25 versions. | 29/10/2026 |
| CVE-2026-61988 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in Auction Nudge – Your eBay on Your Site <= 8.4.0 versions. | 29/10/2026 |
| CVE-2026-54866 | HIGH7.1 | Unauthenticated Cross Site Scripting (XSS) in Razorpay Payment Button Elementor Plugin <= 1.2.8 versions. | 29/10/2026 |