sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total18,248
Critical1,270
High4,357
Medium12,382
Reset
Showing 3101-3120 of 18248 records
Threat Entry Updated 2026-06-17

CVE-2026-22516 - Wizor's Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wizor's wizors-investments allows PHP Local File Inclusion.This issue affects Wizor's: from n/a through

PLUGIN Wizor's

CVE-2026-22516

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22524 - Legacy Admin Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Legacy Admin legacy-admin allows Reflected XSS.This issue affects Legacy Admin: from n/a through

PLUGIN Legacy Admin

CVE-2026-22524

HIGH CVSS 7.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22523 - Ultra WordPress Admin Theme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Ultra WordPress Admin ultra-admin allows Reflected XSS.This issue affects Ultra WordPress Admin: from n/a through

THEME Ultra WordPress Admin

CVE-2026-22523

HIGH CVSS 7.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22520 - Handmade Framework Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in G5Theme Handmade Framework handmade-framework allows Reflected XSS.This issue affects Handmade Framework: from n/a through

PLUGIN Handmade Framework

CVE-2026-22520

HIGH CVSS 7.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22515 - VegaDays Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegadays allows PHP Local File Inclusion.This issue affects VegaDays: from n/a through

PLUGIN VegaDays

CVE-2026-22515

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22514 - Unica Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.This issue affects Unica: from n/a through

PLUGIN Unica

CVE-2026-22514

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22513 - Triompher Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Triompher triompher allows PHP Local File Inclusion.This issue affects Triompher: from n/a through

PLUGIN Triompher

CVE-2026-22513

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22512 - Roisin Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Roisin roisin allows PHP Local File Inclusion.This issue affects Roisin: from n/a through

PLUGIN Roisin

CVE-2026-22512

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22511 - NeoBeat Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes NeoBeat neobeat allows PHP Local File Inclusion.This issue affects NeoBeat: from n/a through

PLUGIN NeoBeat

CVE-2026-22511

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22510 - Melody Plugin

Deserialization of Untrusted Data vulnerability in AncoraThemes Melody melodyschool allows Object Injection.This issue affects Melody: from n/a through

PLUGIN Melody

CVE-2026-22510

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22509 - Gioia Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gioia gioia allows PHP Local File Inclusion.This issue affects Gioia: from n/a through

PLUGIN Gioia

CVE-2026-22509

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22508 - Dentalux Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Dentalux dentalux allows PHP Local File Inclusion.This issue affects Dentalux: from n/a through

PLUGIN Dentalux

CVE-2026-22508

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22507 - Beelove Plugin

Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through

PLUGIN Beelove

CVE-2026-22507

CRITICAL CVSS 9.8 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22506 - Amoli Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a through

PLUGIN Amoli

CVE-2026-22506

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22505 - Morning Records Plugin

Deserialization of Untrusted Data vulnerability in AncoraThemes Morning Records morning-records allows Object Injection.This issue affects Morning Records: from n/a through

PLUGIN Morning Records

CVE-2026-22505

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22504 - ProLingua Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ProLingua prolingua allows PHP Local File Inclusion.This issue affects ProLingua: from n/a through

PLUGIN ProLingua

CVE-2026-22504

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22503 - Nelson Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nelson nelson allows PHP Local File Inclusion.This issue affects Nelson: from n/a through

PLUGIN Nelson

CVE-2026-22503

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22502 - Mr. Cobbler Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr. Cobbler mr-cobbler allows PHP Local File Inclusion.This issue affects Mr. Cobbler: from n/a through

PLUGIN Mr. Cobbler

CVE-2026-22502

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-22499 - Lella Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella allows PHP Local File Inclusion.This issue affects Lella: from n/a through

PLUGIN Lella

CVE-2026-22499

HIGH CVSS 8.1 2026-03-25
Open Full Technical Breakdown
Scroll to top