Feed live

The CMS vulnerability ledger.

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

335,499

All time

Critical · Active

10,538

CVSS ≥ 9.0

New · 14 days

707

Newly disclosed

Feed last synced

4 hrs ago

Data freshness

Showing 1–30 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-12789	medium	5.1/10	ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection	Jun 21, 2026 6d ago
CVE-2026-12115	medium	6.6/10	Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import	Jun 17, 2026 10d ago
CVE-2026-49781	critical	9.8/10	WordPress OttoKit plugin <= 1.1.27 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49770	critical	9.8/10	WordPress WP Travel Engine plugin <= 6.7.12 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49769	critical	9.8/10	WordPress wpForo Forum plugin <= 3.1.0 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49768	critical	9.8/10	WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49765	critical	9.8/10	WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.8 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49763	critical	9.8/10	WordPress Integration for Contact Form 7 HubSpot plugin <= 1.3.7 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49109	critical	9.8/10	WordPress Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.4.3 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49106	critical	9.8/10	WordPress Integration for Contact Form 7 and Constant Contact plugin <= 1.1.6 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49105	critical	9.8/10	WordPress WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49104	critical	9.8/10	WordPress Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin <= 1.2.1 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49085	critical	9.8/10	WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.4 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-42687	high	8.1/10	WordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39532	high	8.8/10	WordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39499	high	7.2/10	WordPress Advanced Product Fields (Product Addons) for WooCommerce plugin <= 1.6.19 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39498	high	7.2/10	WordPress YayMail plugin <= 4.3.3 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39481	high	7.2/10	WordPress Modula Image Gallery plugin <= 2.14.18 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39478	high	8.8/10	WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.23.87 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39474	high	8.8/10	WordPress Post Duplicator plugin <= 3.0.10 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39472	high	7.2/10	WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39471	high	7.2/10	WordPress ShortPixel Image Optimizer plugin <= 6.4.3 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-39434	high	7.2/10	WordPress CTX Feed plugin <= 6.6.26 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-27053	critical	9.8/10	WordPress Broadcast Live Video plugin < 7.1.3 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-9691	critical	9.8/10	WordPress Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.1 - PHP Object Injection vulnerability	Jun 15, 2026 11d ago
CVE-2026-49954	high	8.6/10	Discuz! X5.0 Local File Inclusion via enable_disable.php Plugin Directory	Jun 15, 2026 11d ago
CVE-2026-49952	critical	9.3/10	Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle	Jun 15, 2026 11d ago
CVE-2016-20082	medium	6.9/10	WordPress Plugin Abtest Local File Inclusion via abtest_admin.php	Jun 15, 2026 12d ago
CVE-2016-20080	medium	6.9/10	WordPress Brandfolder Plugin 3.0 Local File Inclusion via callback.php	Jun 15, 2026 12d ago
CVE-2016-20079	medium	6.9/10	WordPress Dharma Booking 2.28.3 Local File Inclusion via proccess.php	Jun 15, 2026 12d ago