Tagged “nvd”

CVEs tagged nvd, newest first.

51020 CVEsRSS

CVE-2026-62117High· 8.5

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

▾ TwilightDmitry V. · barcode-scanner-lite-pos-to-manage-products-inventory-and-ordersEPSS 0.27%via NVD

CVE-2026-62116High· 7.1

Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.

▾ TwilightDmitry V. · barcode-scanner-lite-pos-to-manage-products-inventory-and-ordersEPSS 0.18%via NVD

CVE-2026-62115High· 8.1

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

▾ Twilightkutethemes · KuteShopEPSS 0.27%via NVD

CVE-2026-62100High· 7.1

Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

▾ Twilightkutethemes · KuteShopEPSS 0.18%via NVD

CVE-2026-62099High· 8.1

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

▾ Twilightkutethemes · BoutiqueEPSS 0.27%via NVD

CVE-2026-62098Medium· 6.5

Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

▾ Sunlitkutethemes · BoutiqueEPSS 0.20%via NVD

CVE-2026-62096High· 8.1

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

▾ Twilightkutethemes · BiolifeEPSS 0.27%via NVD

CVE-2026-62095High· 7.1

Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

▾ Twilightkutethemes · BiolifeEPSS 0.18%via NVD

CVE-2026-62094High· 8.1

Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

▾ Twilightkutethemes · TechOneEPSS 0.27%via NVD

CVE-2026-62093High· 7.1

Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

▾ Twilightkutethemes · TechOneEPSS 0.18%via NVD

CVE-2026-62092High· 8.1

Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

▾ Twilightkutethemes · ArmaniaEPSS 0.27%via NVD

CVE-2026-62091High· 7.1

Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

▾ Twilightkutethemes · ArmaniaEPSS 0.18%via NVD

CVE-2026-62090Critical· 9.8

Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.

Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.

▾ MidnightThemeREX · WineShopEPSS 0.38%via NVD

CVE-2026-62087Critical· 9.8

Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.

Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.

▾ MidnightThemeREX · EquadioEPSS 0.38%via NVD

CVE-2026-62086Critical· 9.8

Unauthenticated PHP Object Injection in Juno <= 2.25 versions.

Unauthenticated PHP Object Injection in Juno <= 2.25 versions.

▾ MidnightThemeREX · JunoEPSS 0.38%via NVD

CVE-2026-62082High· 7.1

Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.

Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.

▾ TwilightAn-Themes · Pin WPEPSS 0.18%via NVD

CVE-2026-62077Critical· 9.8

Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.

Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.

▾ MidnightBoldThemes · AvalaEPSS 0.38%via NVD

CVE-2026-62076Critical· 9.8

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

▾ MidnightThe4 · KallesEPSS 0.38%via NVD

CVE-2026-62075High· 8.1

Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.

Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.

▾ TwilightMymoun · BackhoeEPSS 0.34%via NVD

CVE-2026-62074High· 8.1

Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.

▾ TwilightThemeREX · OzeumEPSS 0.34%via NVD

CVE-2026-62070High· 8.1

Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.

Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.

▾ TwilightCKThemes · FlipmartEPSS 0.34%via NVD

CVE-2026-62069High· 8.1

Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.

Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.

▾ TwilightCocoBasic · FabiusEPSS 0.34%via NVD

CVE-2026-62068High· 8.1

Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.

Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.

▾ TwilightCocoBasic · TeoroEPSS 0.34%via NVD

CVE-2026-62067High· 8.1

Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.

Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.

▾ TwilightCocoBasic · KavenEPSS 0.34%via NVD

CVE-2026-62066High· 8.1

Unauthenticated Local File Inclusion in Volos <= 1.2 versions.

Unauthenticated Local File Inclusion in Volos <= 1.2 versions.

▾ TwilightCocoBasic · VolosEPSS 0.34%via NVD

CVE-2026-62065High· 8.1

Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.

Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.

▾ TwilightCocoBasic · CardeaEPSS 0.34%via NVD

CVE-2026-62064High· 7.1

Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.

Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions.

▾ TwilightBracketweb · AmbedEPSS 0.18%via NVD

CVE-2026-62054Critical· 9.8

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

▾ MidnightThemeREX · Yacht RentalEPSS 0.38%via NVD

CVE-2026-62053Critical· 9.8

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

▾ MidnightThemeREX · Wine HouseEPSS 0.38%via NVD

CVE-2026-62052Critical· 9.8

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.

Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.

▾ MidnightThemeREX · TipsyEPSS 0.38%via NVD

CVEs tagged “nvd” — page 165 · VulnSea