Most recent entries from cvelistv5

cve-2026-9060

Wed, 10 Jun 2026 06:00:11 +0000

Agile Store Locator < 1.6.6 - Admin+ Stored XSS via map_style

cve-2026-9067

Wed, 10 Jun 2026 06:00:12 +0000

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

cve-2026-29115

Wed, 10 Jun 2026 06:08:21 +0000

cve-2026-29116

Wed, 10 Jun 2026 06:16:34 +0000

cve-2026-10846

Wed, 10 Jun 2026 06:37:59 +0000

Insufficient verification that responses belong to a query

cve-2026-11815

Wed, 10 Jun 2026 06:39:26 +0000

Insecure Deserialization via MITM in Layer 7 Policy Manager

cve-2026-9019

Wed, 10 Jun 2026 06:48:28 +0000

Easy Image Collage <= 1.13.6 - Authenticated (Author+) Stored Cross-Site Scripting via 'grid[properties][borderColor]' and 'grid[images][N][attachment_url]' Parameters

cve-2026-10721

Wed, 10 Jun 2026 06:59:03 +0000

Concrete CMS below 9.5.2 is vulnerable to PHP Object Injection via unserialize() calls in the in Permission, Cache, and Search components

cve-2026-8853

Wed, 10 Jun 2026 07:50:55 +0000

MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter

cve-2026-8613

Wed, 10 Jun 2026 07:50:56 +0000

aThemes Addons for Elementor <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Widget Setting