Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

238 records

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00408 Published 2026-10-30 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00419 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00419 Published 2026-10-29 No fix listed CWE-502
TI-2026-82503 CVE-2026-62006 · GHSA-rph7-jgqm-mq62

PHP object injection in WordPress Nuts theme

Priority MEDIUM 49

Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00419 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00396 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00476 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00476 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Ozisti <= 1.1.10 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0049 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0049 Published 2026-10-29 No fix listed CWE-502
Priority MEDIUM 49

Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0049 Published 2026-10-29 No fix listed CWE-502
Load more