Threat Entry Updated 2026-06-17

CVE-2026-39573 - WordPress component

Unauthenticated PHP Object Injection in Mildhill

UNKNOWN WordPress component

CVE-2026-39573

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39568 - WordPress component

Unauthenticated Local File Inclusion in Mr. SEO

UNKNOWN WordPress component

CVE-2026-39568

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39567 - WordPress component

Unauthenticated PHP Object Injection in Santé

UNKNOWN WordPress component

CVE-2026-39567

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39558 - WordPress component

Unauthenticated Local File Inclusion in Malmö

UNKNOWN WordPress component

CVE-2026-39558

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39557 - WordPress component

Unauthenticated PHP Object Injection in NeoBeat

UNKNOWN WordPress component

CVE-2026-39557

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39554 - WordPress component

Unauthenticated PHP Object Injection in Fidalgo

UNKNOWN WordPress component

CVE-2026-39554

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39549 - WordPress component

Unauthenticated Local File Inclusion in Aperitif

UNKNOWN WordPress component

CVE-2026-39549

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39577 - WordPress component

Unauthenticated PHP Object Injection in Playroom

UNKNOWN WordPress component

CVE-2026-39577

MEDIUM CVSS 5.5 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39547 - WordPress component

Unauthenticated Local File Inclusion in Getaway < 1.8 versions.

UNKNOWN WordPress component

CVE-2026-39547

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39545 - WordPress component

Unauthenticated PHP Object Injection in Zermatt

UNKNOWN WordPress component

CVE-2026-39545

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39539 - WordPress component

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking

UNKNOWN WordPress component

CVE-2026-39539

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39537 - WordPress component

Unauthenticated Local File Inclusion in Mikado Core

UNKNOWN WordPress component

CVE-2026-39537

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39546 - WordPress component

Subscriber Privilege Escalation in MultiLoca

UNKNOWN WordPress component

CVE-2026-39546

HIGH CVSS 7.6 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39548 - WordPress component

Unauthenticated Cross Site Scripting (XSS) in MagOne

UNKNOWN WordPress component

CVE-2026-39548

HIGH CVSS 7.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39529 - WordPress component

Unauthenticated PHP Object Injection in Elementra

UNKNOWN WordPress component

CVE-2026-39529

CRITICAL CVSS 9.8 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39438 - WordPress component

Unauthenticated SQL Injection in ListingPro

UNKNOWN WordPress component

CVE-2026-39438

CRITICAL CVSS 9.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39522 - WordPress component

Unauthenticated Local File Inclusion in Solene

UNKNOWN WordPress component

CVE-2026-39522

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39446 - WordPress component

Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.

UNKNOWN WordPress component

CVE-2026-39446

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39443 - WordPress component

Unauthenticated PHP Object Injection in EmallShop

UNKNOWN WordPress component

CVE-2026-39443

HIGH CVSS 8.1 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-39433 - WordPress component

Subscriber Arbitrary Content Deletion in WPAMS < 49.5.3 versions.

UNKNOWN WordPress component

CVE-2026-39433

MEDIUM CVSS 6.5 2026-06-17

Risk Score

Open Full Technical Breakdown