Search Results (18105 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-103071 2026-10-11 7.5 High
Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection.This issue affects Thank You Page Customizer for WooCommerce: from n/a through 1.2.3.
CVE-2026-101022 1 Grid Protection Alliance 2 Openhistorian, Openpdc 2026-10-11 4.3 Medium
A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user can attempt connections to arbitrary internal network destinations, revealing which destinations are reachable. With repeated attempts, an attacker may be able to map the internal network.
CVE-2026-66566 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-62115 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62099 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
CVE-2026-62096 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
CVE-2026-62094 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
CVE-2026-62092 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
CVE-2026-62075 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions.
CVE-2026-62074 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions.
CVE-2026-62070 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions.
CVE-2026-62069 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Fabius <= 1.0 versions.
CVE-2026-62068 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Teoro <= 1.1 versions.
CVE-2026-62067 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Kaven <= 1.2 versions.
CVE-2026-62066 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Volos <= 1.2 versions.
CVE-2026-62065 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Cardea <= 2.3 versions.
CVE-2026-62030 2026-10-11 7.2 High
Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions.
CVE-2026-62020 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
CVE-2026-48194 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
CVE-2026-48193 2026-10-11 8.1 High
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.