Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-05 02:25Z
2026-06-17
2026-06-17 13:20Z
CRIT

CVE-2026-40749 — Subscriber: Arbitrary File Upload in Charity Zone <= 1.1.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40749

Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDSubscriberTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-06-17
2026-06-17 13:20Z
CRIT

CVE-2026-40748 — Subscriber: Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40748

Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDSubscriberTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-06-17
2026-06-17 13:20Z
CRIT

CVE-2026-40747 — Subscriber: Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40747

Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDSubscriberTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-06-17
2026-06-17 13:20Z
CRIT

CVE-2026-40746 — Subscriber: Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40746

Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDSubscriberTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-40739 — PHP: Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40739

Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-40736 — PHP: Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40736

Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-40735 — PHP: Unauthenticated PHP Object Injection in Reina <= 2.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40735

Unauthenticated PHP Object Injection in Reina <= 2.1 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
728 × 90 / responsive · programmatic ad slot
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-40731 — File: Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40731

Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-40726 — Broken: Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40726

Unauthenticated Broken Access Control in User Registration Stripe <= 1.3.14 versions. CVSSv3.1 8.2 (HIGH)

CWECWE 862VNDBrokenTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
CRIT

CVE-2026-40725 — PHP: Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-40725

Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions. CVSSv3.1 9.8 (CRITICAL)

CWECWE 502TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39598 — Upload: Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39598

Unrestricted Upload of File with Dangerous Type vulnerability in Kodezen LLC Academy LMS Pro allows Upload a Web Shell to a Web Server. This issue affects Academy LMS Pro: from n/a before 3.5.2. CVSSv3.1 8.0 (HIGH)

CWECWE 434TYPVulnerability
8.0
CVSS v3.1
90
Edit Score
2026-06-17
2026-06-17 13:20Z
CRIT

CVE-2026-39596 — SQL: Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39596

Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. CVSSv3.1 9.3 (CRITICAL)

CWECWE 89TYPVulnerability
9.3
CVSS v3.1
97
Edit Score
2026-06-17
2026-06-17 13:20Z
CRIT

CVE-2026-39589 — Subscriber: Arbitrary File Upload in Webenvo <= 0.0.6 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39589

Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. CVSSv3.1 9.9 (CRITICAL)

CWECWE 434VNDSubscriberTYPVulnerability
9.9
CVSS v3.1
100
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39582 — File: Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39582

Unauthenticated Local File Inclusion in Hitek < 1.8.3 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39580 — PHP: Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39580

Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39573 — PHP: Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39573

Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39568 — File: Unauthenticated Local File Inclusion in Mr.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39568

Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39567 — PHP: Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39567

Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39558 — File: Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39558

Unauthenticated Local File Inclusion in Malmö <= 2.2 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39557 — PHP: Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39557

Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39554 — PHP: Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39554

Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39549 — File: Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39549

Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39547 — File: Unauthenticated Local File Inclusion in Getaway < 1.8 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39547

Unauthenticated Local File Inclusion in Getaway < 1.8 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 98TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39545 — PHP: Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39545

Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2026-06-17
2026-06-17 13:20Z
HIGH

CVE-2026-39539 — PHP: Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2026-39539

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions. CVSSv3.1 8.1 (HIGH)

CWECWE 502TYPVulnerability
8.1
CVSS v3.1
91
Edit Score