Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-104398 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo al... | 2026-10-13 |
| CVE-2026-103357 | not reported | — | No | Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Acces... | 2026-10-13 |
| CVE-2026-103071 | high | 7.5 | No | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-yo... | 2026-10-13 |
| CVE-2026-94676 | high | 7.2 | No | Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan:... | 2026-10-13 |
| CVE-2026-66435 | medium | 5.9 | No | Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive D... | 2026-10-13 |
| CVE-2026-105885 | high | 8.8 | No | Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10We... | 2026-10-13 |
| CVE-2026-102388 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows... | 2026-10-13 |
| CVE-2026-93950 | high | 7.5 | No | Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.... | 2026-10-13 |
| CVE-2026-93949 | high | 7.1 | No | Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows P... | 2026-10-13 |
| CVE-2026-93945 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a... | 2026-10-13 |
| CVE-2026-93944 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n... | 2026-10-13 |
| CVE-2026-93943 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a... | 2026-10-13 |
| CVE-2026-93942 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a thr... | 2026-10-13 |
| CVE-2026-93941 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a thr... | 2026-10-13 |
| CVE-2026-93940 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a... | 2026-10-13 |
| CVE-2026-93938 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: fro... | 2026-10-13 |
| CVE-2026-93937 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a thr... | 2026-10-13 |
| CVE-2026-93936 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a... | 2026-10-13 |
| CVE-2026-93935 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Pla... | 2026-10-13 |
| CVE-2026-93934 | critical | 9.8 | No | Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n... | 2026-10-13 |