Priority LOW 37
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: f…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00337 · Published 2026-10-23 · No fix listed CWE-98
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00328 · Published 2026-10-10 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00322 · Published 2026-10-10 · No fix listed CWE-502
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00304 · Published 2026-10-10 · No fix listed CWE-502
Priority LOW 37
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00338 · Published 2026-10-10 · No fix listed CWE-98
Priority MEDIUM 49
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00375 · Published 2026-10-10 · No fix listed CWE-502
Priority MEDIUM 50
Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00564 · Published 2026-08-06 · No fix listed CWE-502
Priority MEDIUM 50
Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00564 · Published 2026-08-06 · No fix listed CWE-502
Priority MEDIUM 50
Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00564 · Published 2026-08-06 · No fix listed CWE-502
Priority MEDIUM 50
Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00564 · Published 2026-08-06 · No fix listed CWE-502
Priority MEDIUM 50
Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00564 · Published 2026-08-06 · No fix listed CWE-502
Priority LOW 38
Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-07-02 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Wizor's wizors-investments allows PHP Local File Inclusion.This issue affects Wizor's:…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00431 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes VegaDays vegadays allows PHP Local File Inclusion.This issue affects VegaDays: from n/…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00539 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Unica unica allows PHP Local File Inclusion.This issue affects Unica: from n/a through…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00539 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Triompher triompher allows PHP Local File Inclusion.This issue affects Triompher: from…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00539 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 37
Deserialization of Untrusted Data vulnerability in AncoraThemes Melody melodyschool allows Object Injection.This issue affects Melody: from n/a through <= 1.6.3.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00409 · Published 2026-03-25 · No fix listed CWE-502
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Dentalux dentalux allows PHP Local File Inclusion.This issue affects Dentalux: from n/…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority MEDIUM 49
Deserialization of Untrusted Data vulnerability in AncoraThemes Beelove beelove allows Object Injection.This issue affects Beelove: from n/a through <= 1.2.6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00529 · Published 2026-03-25 · No fix listed CWE-502
Priority LOW 37
Deserialization of Untrusted Data vulnerability in AncoraThemes Morning Records morning-records allows Object Injection.This issue affects Morning Records: from n/a through <= 1.2.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00409 · Published 2026-03-25 · No fix listed CWE-502
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows PHP Local File Inclusion.This issue affects Hypnother…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP Local File Inclusion.This issue affects Greenville: f…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 37
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File Inclusion.This issue affects Midi: from n/a through <=…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00384 · Published 2026-03-05 · No fix listed CWE-98
Priority LOW 37
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Local File Inclusion.This issue affects Notarius: from n/…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00384 · Published 2026-03-05 · No fix listed CWE-98
Load more