Threat Entry Updated 2026-06-17

CVE-2026-28121 - Anderson Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Anderson andersonclinic allows PHP Local File Inclusion.This issue affects Anderson: from n/a through

PLUGIN Anderson

CVE-2026-28121

HIGH CVSS 8.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28120 - Dr.Patterson Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Dr.Patterson dr-patterson allows PHP Local File Inclusion.This issue affects Dr.Patterson: from n/a through

PLUGIN Dr.Patterson

CVE-2026-28120

HIGH CVSS 8.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28119 - Nirvana Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through

PLUGIN Nirvana

CVE-2026-28119

HIGH CVSS 8.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28118 - Welldone Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusion.This issue affects Welldone: from n/a through

PLUGIN Welldone

CVE-2026-28118

HIGH CVSS 8.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28117 - smart SEO Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through

PLUGIN smart SEO

CVE-2026-28117

HIGH CVSS 8.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28122 - ListingPro Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CridioStudio ListingPro listingpro-plugin allows Reflected XSS.This issue affects ListingPro: from n/a through

PLUGIN ListingPro

CVE-2026-28122

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28105 - Good Energy Plugin

Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through

PLUGIN Good Energy

CVE-2026-28105

CRITICAL CVSS 9.8 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28114 - WooCommerce License Manager Plugin

Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.This issue affects WooCommerce License Manager: from n/a through

PLUGIN WooCommerce License Manager

CVE-2026-28114

CRITICAL CVSS 9.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28107 - Muzicon Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Muzicon muzicon allows PHP Local File Inclusion.This issue affects Muzicon: from n/a through

PLUGIN Muzicon

CVE-2026-28107

HIGH CVSS 8.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28113 - Ultimate Learning Pro Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in azzaroco Ultimate Learning Pro indeed-learning-pro allows Reflected XSS.This issue affects Ultimate Learning Pro: from n/a through

PLUGIN Ultimate Learning Pro

CVE-2026-28113

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28112 - AllInOne - Banner Rotator Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows Reflected XSS.This issue affects AllInOne - Banner Rotator: from n/a through

PLUGIN AllInOne - Banner Rotator

CVE-2026-28112

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28110 - LambertGroup - AllInOne - Banner with Playlist Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Playlist all-in-one-bannerWithPlaylist allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Playlist: from n/a through

PLUGIN LambertGroup - AllInOne - Banner with Playlist

CVE-2026-28110

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28109 - LambertGroup - AllInOne - Content Slider Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Content Slider all-in-one-contentSlider allows Reflected XSS.This issue affects LambertGroup - AllInOne - Content Slider: from n/a through

PLUGIN LambertGroup - AllInOne - Content Slider

CVE-2026-28109

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28108 - LambertGroup - AllInOne - Banner with Thumbnails Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all-in-one-thumbnailsBanner allows Reflected XSS.This issue affects LambertGroup - AllInOne - Banner with Thumbnails: from n/a through

PLUGIN LambertGroup - AllInOne - Banner with Thumbnails

CVE-2026-28108

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28098 - Save Life Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Save Life save-life allows PHP Local File Inclusion.This issue affects Save Life: from n/a through

PLUGIN Save Life

CVE-2026-28098

HIGH CVSS 8.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28103 - LBG Zoominoutslider Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LBG Zoominoutslider lbg_zoominoutslider allows Reflected XSS.This issue affects LBG Zoominoutslider: from n/a through

PLUGIN LBG Zoominoutslider

CVE-2026-28103

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28102 - UberSlider Classic Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Classic uberSlider_classic allows Reflected XSS.This issue affects UberSlider Classic: from n/a through

PLUGIN UberSlider Classic

CVE-2026-28102

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28101 - UberSlider MouseInteraction Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider MouseInteraction uberSlider_mouseinteraction allows Reflected XSS.This issue affects UberSlider MouseInteraction: from n/a through

PLUGIN UberSlider MouseInteraction

CVE-2026-28101

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28100 - UberSlider PerpetuumMobile Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider PerpetuumMobile uberSlider_perpetuummobile allows Reflected XSS.This issue affects UberSlider PerpetuumMobile: from n/a through

PLUGIN UberSlider PerpetuumMobile

CVE-2026-28100

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-28099 - UberSlider Ultra Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup UberSlider Ultra uberSlider_ultra allows Reflected XSS.This issue affects UberSlider Ultra: from n/a through

PLUGIN UberSlider Ultra

CVE-2026-28099

HIGH CVSS 7.1 2026-03-05

Risk Score

Open Full Technical Breakdown