CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- realvirtualmx rvcfdi para woocommerceWordPress RVCFDI para Woocommerce plugin <= 8.1.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- agnihd cartify - woocommerce gutenberg wordpress themeWordPress Cartify - WooCommerce Gutenberg WordPress Theme theme <= 1.3 - Arbitrary Content Deletion vulnerability6.5 Medium
- wpdiscover timeline event historyWordPress Timeline Event History plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- agence web eoxia - montpellier wp shopWordPress WP shop plugin <= 2.6.1 - Local File Inclusion vulnerability7.5 High
- themesflat elementorWordPress Themesflat Elementor plugin <= 1.0.1 - PHP Object Injection vulnerability9.8 Critical
- vanquish woocommerce bulk product editorWordPress WooCommerce Bulk Product Editor plugin <= 3.0 - Broken Access Control vulnerability7.1 High
- vanquish upload files anywhereWordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Download vulnerability7.5 High
- vanquish upload files anywhereWordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Deletion vulnerability8.6 High
- xforwoocommerce product filter for woocommerceWordPress Product Filter for WooCommerce plugin <= 9.1.2 - Privilege Escalation vulnerability7.2 High
- vanquish user extra fieldsWordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability7.7 High
- vanquish user extra fieldsWordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability8.6 High
- solverwp portfolio builderWordPress Portfolio Builder plugin <= 1.2.5 - Local File Inclusion vulnerability8.1 High
- solverwp eleblog – elementor blog and magazine addonsWordPress Eleblog – Elementor Blog And Magazine Addons plugin <= 2.0.3 - Local File Inclusion vulnerability8.1 High
- beeteam368 vidorevWordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File Inclusion vulnerability7.5 High
- ancorathemes sevenhillsWordPress SevenHills theme <= 1.6.2 - PHP Object Injection vulnerability9.8 Critical
- ancorathemes kindlycareWordPress KindlyCare theme <= 1.6.1 - PHP Object Injection vulnerability9.8 Critical
- themegoods capellaWordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability9.8 Critical
- gt3themes soho - photography wordpress themeWordPress SOHO - Photography WordPress Theme theme <= 3.0.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- gt3themes oyster - photography wordpress themeWordPress Oyster - Photography WordPress Theme theme <= 4.4.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- teconcetheme emerce coreWordPress Emerce Core plugin <= 1.8 - SQL Injection vulnerability9.3 Critical
- teconcetheme uroan coreWordPress Uroan Core plugin <= 1.4.4 - SQL Injection vulnerability9.3 Critical
- don-themes wolmart coreWordPress Wolmart Core plugin <= 1.9.6 - SQL Injection vulnerability9.3 Critical
- jthemes prestigeWordPress Prestige theme < 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- jthemes prestigeWordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability9.8 Critical
- magepeopleteam booking and rental managerWordPress Booking and Rental Manager plugin <= 2.5.9 - PHP Object Injection vulnerability8.8 High
- basix nex-formsWordPress NEX-Forms plugin <= 9.1.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- primersoftware primer mydata for woocommerceWordPress Primer MyData for Woocommerce plugin <= 4.2.8 - Path Traversal vulnerability5.3 Medium
- basix nex-formsWordPress NEX-Forms plugin <= 9.1.7 - Cross Site Scripting (XSS) vulnerability7.1 High
- veronalabs slimstat analyticsWordPress Slimstat Analytics plugin <= 5.3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- fuelthemes peakshopsWordPress PeakShops theme < 1.5.9 - Local File Inclusion vulnerability8.1 High
- teconcetheme woodly coreWordPress Woodly Core plugin <= 1.4 - SQL Injection vulnerability9.3 Critical
- teconcetheme saasplate coreWordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability9.3 Critical
- teconcetheme nestbyte coreWordPress Nestbyte Core plugin <= 1.2 - SQL Injection vulnerability9.3 Critical
- teconcetheme medinik coreWordPress Medinik Core plugin <= 1.3.6 - SQL Injection vulnerability9.3 Critical
- teconcetheme electio coreWordPress Electio Core plugin <= 1.4 - SQL Injection vulnerability9.3 Critical
- teconcetheme crete coreWordPress Crete Core plugin <= 1.4.3 - SQL Injection vulnerability9.3 Critical
- teconcetheme allmartWordPress Allmart plugin <= 1.1 - SQL Injection vulnerability9.3 Critical
- modeltheme frameworkWordPress ModelTheme Framework plugin < 2.0.0 - Broken Access Control vulnerability7.5 High
- designthemes core featuresWordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themegoods photomeWordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability9.8 Critical
- laborator oxygenWordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- ghostpool gaugeWordPress Gauge theme <= 6.56.4 - Broken Access Control vulnerability7.5 High
- ghostpool aardvark pluginWordPress Aardvark Plugin plugin <= 2.19 - Broken Access Control vulnerability7.5 High
- ghostpool aardvarkWordPress Aardvark theme <= 4.6.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- teconcetheme coven coreWordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability9.3 Critical
- fuelthemes peakshopsWordPress PeakShops theme <= 1.5.9 - PHP Object Injection vulnerability8.8 High
- saad iqbal new user approveWordPress New User Approve plugin <= 3.2.0 - Broken Access Control vulnerability8.6 High
- wpkube cool tag cloudWordPress Cool Tag Cloud plugin <= 2.29 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- ahachat messenger marketing, unknown ahachat messenger marketing +1 moreWordPress AhaChat Messenger Marketing plugin <= 1.1 - Broken Authentication vulnerability6.5 Medium
- peterwsterling simple archive generatorWordPress Simple Archive Generator plugin <= 5.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- Show moreLoading…