sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total18,248
Critical1,270
High4,357
Medium12,382
Reset
Showing 2961-2980 of 18248 records
Threat Entry Updated 2026-06-17

CVE-2026-27082 - Love Story Plugin

Deserialization of Untrusted Data vulnerability in ThemeREX Love Story lovestory allows Object Injection.This issue affects Love Story: from n/a through

PLUGIN Love Story

CVE-2026-27082

CRITICAL CVSS 9.8 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27081 - Rosebud Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Rosebud rosebud allows PHP Local File Inclusion.This issue affects Rosebud: from n/a through

PLUGIN Rosebud

CVE-2026-27081

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27080 - Deston Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Deston deston allows PHP Local File Inclusion.This issue affects Deston: from n/a through

PLUGIN Deston

CVE-2026-27080

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27079 - Amfissa Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Amfissa amfissa allows PHP Local File Inclusion.This issue affects Amfissa: from n/a through

PLUGIN Amfissa

CVE-2026-27079

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27078 - Emaurri Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Emaurri emaurri allows PHP Local File Inclusion.This issue affects Emaurri: from n/a through

PLUGIN Emaurri

CVE-2026-27078

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27077 - MultiOffice Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes MultiOffice multioffice allows PHP Local File Inclusion.This issue affects MultiOffice: from n/a through

PLUGIN MultiOffice

CVE-2026-27077

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27076 - LuxeDrive Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allows PHP Local File Inclusion.This issue affects LuxeDrive: from n/a through

PLUGIN LuxeDrive

CVE-2026-27076

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27051 - Golo Plugin

Incorrect Privilege Assignment vulnerability in uxper Golo golo allows Privilege Escalation.This issue affects Golo: from n/a through

PLUGIN Golo

CVE-2026-27051

CRITICAL CVSS 9.8 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27049 - Jobica Core Plugin

Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobica Core jobica-core allows Authentication Abuse.This issue affects Jobica Core: from n/a through

PLUGIN Jobica Core

CVE-2026-27049

CRITICAL CVSS 9.8 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27071 - WPCafe Plugin

Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through

PLUGIN WPCafe

CVE-2026-27071

CRITICAL CVSS 9.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27075 - Belfort Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Belfort belfort allows PHP Local File Inclusion.This issue affects Belfort: from n/a through

PLUGIN Belfort

CVE-2026-27075

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27048 - The Aisle Core Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core allows PHP Local File Inclusion.This issue affects The Aisle Core: from n/a through

PLUGIN The Aisle Core

CVE-2026-27048

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27054 - Penci Soledad Data Migrator Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Soledad Data Migrator penci-data-migrator allows Reflected XSS.This issue affects Penci Soledad Data Migrator: from n/a through

PLUGIN Penci Soledad Data Migrator

CVE-2026-27054

HIGH CVSS 7.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27044 - Total Poll Lite Plugin

Improper Control of Generation of Code ('Code Injection') vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Remote Code Inclusion.This issue affects Total Poll Lite: from n/a through

PLUGIN Total Poll Lite

CVE-2026-27044

CRITICAL CVSS 9.9 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27045 - WooCommerce Infinite Scroll Plugin

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through

PLUGIN WooCommerce Infinite Scroll

CVE-2026-27045

HIGH CVSS 8.8 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27040 - WZone Plugin

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: from n/a through

PLUGIN WZone

CVE-2026-27040

HIGH CVSS 8.8 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27039 - WZone Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AA-Team WZone woozone allows Blind SQL Injection.This issue affects WZone: from n/a through

PLUGIN WZone

CVE-2026-27039

HIGH CVSS 8.5 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27047 - Curly Core Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly Core curly-core allows PHP Local File Inclusion.This issue affects Curly Core: from n/a through

PLUGIN Curly Core

CVE-2026-27047

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-27046 - StoreCustomizer Plugin

Missing Authorization vulnerability in Kaira StoreCustomizer woocustomizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StoreCustomizer: from n/a through

PLUGIN StoreCustomizer

CVE-2026-27046

MEDIUM CVSS 6.5 2026-03-25
Open Full Technical Breakdown
Scroll to top