sales@hackhalt.com
Free Download Free Download Free Download
Explore Pricing Explore Pricing Explore Pricing

Blog

"Prevention is cheaper than a breach"

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total18,432
Critical1,287
High4,421
Medium12,480
Reset
Showing 3821-3840 of 18432 records
Threat Entry Updated 2026-06-17

CVE-2026-28037 - EventON Plugin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ashanjay EventON eventon allows Reflected XSS.This issue affects EventON: from n/a through

PLUGIN EventON

CVE-2026-28037

HIGH CVSS 7.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28038 - Ultimate Addons for WPBakery Page Builder Plugin

Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Addons for WPBakery Page Builder: from n/a through

PLUGIN Ultimate Addons for WPBakery Page Builder

CVE-2026-28038

MEDIUM CVSS 6.5 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28036 - Ratatouille Plugin

Server-Side Request Forgery (SSRF) vulnerability in SkatDesign Ratatouille ratatouille allows Server Side Request Forgery.This issue affects Ratatouille: from n/a through

PLUGIN Ratatouille

CVE-2026-28036

MEDIUM CVSS 6.4 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28032 - Tuning Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Tuning tuning allows PHP Local File Inclusion.This issue affects Tuning: from n/a through

PLUGIN Tuning

CVE-2026-28032

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28031 - Invetex Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Invetex invetex allows PHP Local File Inclusion.This issue affects Invetex: from n/a through

PLUGIN Invetex

CVE-2026-28031

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28030 - Bonbon Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Bonbon bonbon allows PHP Local File Inclusion.This issue affects Bonbon: from n/a through

PLUGIN Bonbon

CVE-2026-28030

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28029 - EmojiNation Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX EmojiNation emojination allows PHP Local File Inclusion.This issue affects EmojiNation: from n/a through

PLUGIN EmojiNation

CVE-2026-28029

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28028 - MoneyFlow Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX MoneyFlow moneyflow allows PHP Local File Inclusion.This issue affects MoneyFlow: from n/a through

PLUGIN MoneyFlow

CVE-2026-28028

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28027 - Kayon Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Kayon kayon allows PHP Local File Inclusion.This issue affects Kayon: from n/a through

PLUGIN Kayon

CVE-2026-28027

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28026 - Motorix Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Motorix motorix allows PHP Local File Inclusion.This issue affects Motorix: from n/a through

PLUGIN Motorix

CVE-2026-28026

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28025 - Stargaze Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Stargaze stargaze allows PHP Local File Inclusion.This issue affects Stargaze: from n/a through

PLUGIN Stargaze

CVE-2026-28025

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28024 - Helion Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through

PLUGIN Helion

CVE-2026-28024

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28023 - Nuts Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nuts nuts allows PHP Local File Inclusion.This issue affects Nuts: from n/a through

PLUGIN Nuts

CVE-2026-28023

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28022 - Foodie Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Foodie foodie allows PHP Local File Inclusion.This issue affects Foodie: from n/a through

PLUGIN Foodie

CVE-2026-28022

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28021 - Craftis Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Craftis craftis allows PHP Local File Inclusion.This issue affects Craftis: from n/a through

PLUGIN Craftis

CVE-2026-28021

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28020 - Chroma Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Chroma chroma allows PHP Local File Inclusion.This issue affects Chroma: from n/a through

PLUGIN Chroma

CVE-2026-28020

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28019 - Manoir Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Manoir manoir allows PHP Local File Inclusion.This issue affects Manoir: from n/a through

PLUGIN Manoir

CVE-2026-28019

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28018 - Global Logistics Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Global Logistics globallogistics allows PHP Local File Inclusion.This issue affects Global Logistics: from n/a through

PLUGIN Global Logistics

CVE-2026-28018

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28017 - Green Thumb Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through

PLUGIN Green Thumb

CVE-2026-28017

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

CVE-2026-28016 - Luxury Wine Plugin

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Luxury Wine luxury-wine allows PHP Local File Inclusion.This issue affects Luxury Wine: from n/a through

PLUGIN Luxury Wine

CVE-2026-28016

HIGH CVSS 8.1 2026-03-05
Open Full Technical Breakdown
Scroll to top