CVE Monitor
286240 CVEs found
CVE-2026-22330
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Right Way <= 4.0 versions.
CVE-2026-22329
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in Skillate <= 1.2.10 versions.
CVE-2026-22328
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in Auto Repair <= 22.6 versions.
CVE-2026-22327
CRITICAL
17 Jun 2026
Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.
CVE-2026-22326
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.
CVE-2026-22325
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
CVE-2026-9690
HIGH
17 Jun 2026
Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions.
CVE-2025-69179
CRITICAL
17 Jun 2026
Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions.
CVE-2025-69173
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Tipsy <= 1.1 versions.
CVE-2025-69172
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Resurs <= 1.3 versions.
CVE-2025-69171
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Orpheus <= 1.3 versions.
CVE-2025-69161
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Snowy <= 1.13 versions.
CVE-2025-69148
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.
CVE-2025-69145
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Gat <= 1.16 versions.
CVE-2025-69138
HIGH
17 Jun 2026
Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.
CVE-2025-69135
HIGH
17 Jun 2026
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.
CVE-2025-69129
CRITICAL
17 Jun 2026
Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions.
CVE-2025-69117
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in Ingenioso <= 1.14.0 versions.
CVE-2025-69110
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in AirSupply <= 2.0.0 versions.
CVE-2025-60223
HIGH
17 Jun 2026
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions.
CVE-2025-60218
CRITICAL
17 Jun 2026
Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions.
CVE-2025-60205
CRITICAL
17 Jun 2026
Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions.
CVE-2025-59563
HIGH
17 Jun 2026
Subscriber Privilege Escalation in Sonaar <= 4.27.4 versions.
CVE-2025-59560
HIGH
17 Jun 2026
Unauthenticated Cross Site Scripting (XSS) in Sonaar <= 4.27.4 versions.
CVE-2025-58954
HIGH
17 Jun 2026
Unauthenticated Local File Inclusion in HomeRoofer <= 2.11.0 versions.
Page 375 of 400