CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- ancorathemes parkiviaWordPress Parkivia theme <= 1.1.9 - Local File Inclusion vulnerability8.1 High
- ancorathemes impacto patronusWordPress Impacto Patronus theme <= 1.2.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes zio albertoWordPress Zio Alberto theme <= 1.2.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes fooddyWordPress Fooddy theme <= 1.3.10 - Local File Inclusion vulnerability8.1 High
- ancorathemes isidaWordPress Isida theme <= 1.4.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes gustavoWordPress Gustavo theme <= 1.2.2 - Local File Inclusion vulnerability8.1 High
- axiomthemes marvelandWordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes ironfitWordPress Ironfit theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- axiomthemes redyWordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability8.1 High
- ancorathemes coworkingWordPress Coworking theme <= 1.6.1 - Local File Inclusion vulnerability8.1 High
- axiomthemes judeWordPress Jude theme <= 1.3.0 - Local File Inclusion vulnerability8.1 High
- axiomthemes solengWordPress Soleng theme <= 1.0.5 - Local File Inclusion vulnerability8.1 High
- axiomthemes seventreesWordPress SevenTrees theme <=1.0.2 - Local File Inclusion vulnerability8.1 High
- axiomthemes rhodosWordPress Rhodos theme <= 1.3.3 - Local File Inclusion vulnerability8.1 High
- axiomthemes photoliaWordPress Photolia theme <= 1.0.3 - Local File Inclusion vulnerability8.1 High
- axiomthemes a-martWordPress A-Mart theme <= 1.0.2 - Local File Inclusion vulnerability8.1 High
- spencer haws link whisper freeWordPress Link Whisper Free plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- automattic jetpack crmWordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability7.5 High
- dotstore woocommerce category banner managementWordPress Woocommerce Category Banner Management plugin <= 2.5.1 - PHP Object Injection vulnerability8.8 High
- persianscript persian woocommerce smsWordPress Persian Woocommerce SMS plugin <= 7.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- marcus (aka @msykes) wp fullcalendarWordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability7.5 High
- add-ons.org pdf for elementor forms + drag and drop template builderWordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.3.1 - Broken Access Control vulnerability6.5 Medium
- a wp life slider responsive slideshow – image slider, gallery slideshowWordPress Slider Responsive Slideshow – Image slider, Gallery slideshow plugin <= 1.5.4 - PHP Object Injection vulnerability8.8 High
- a wp life image gallery – lightbox gallery, responsive photo gallery, masonry galleryWordPress Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery plugin <= 1.6.0 - PHP Object Injection vulnerability8.8 High
- mikado-themes fivestarWordPress FiveStar theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- case-themes bookedWordPress Booked plugin <= 3.0.0 - Account Takeover vulnerability6.7 Medium
- edge-themes belletristWordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability8.1 High
- axiomthemes pj | life & business coachingWordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability8.1 High
- mikado-themes healthfirstWordPress HealthFirst theme <= 1.0.1 - Local File Inclusion vulnerability8.1 High
- select-themes strukturWordPress Struktur theme <= 2.5.1 - Local File Inclusion vulnerability8.1 High
- themerex freightcoWordPress FreightCo theme <= 1.1.7 - Local File Inclusion vulnerability8.1 High
- themerex lorem ipsum | books & media storeWordPress Lorem Ipsum | Books & Media Store theme <= 1.2.11 - PHP Object Injection vulnerability9.8 Critical
- themerex extreme storeWordPress Extreme Store theme <= 1.5.10 - PHP Object Injection vulnerability9.8 Critical
- bravis-themes bravis addonsWordPress Bravis Addons plugin <= 1.3.0 - Arbitrary File Upload vulnerability9.9 Critical
- themerex r&fWordPress R&F theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- byconsole wooodt liteWordPress WooODT Lite plugin <= 2.5.2 - Payment Bypass Vulnerability vulnerability7.5 High
- themerex yokooWordPress Yokoo theme <= 1.1.11 - Local File Inclusion vulnerability8.1 High
- themerex cobbleWordPress Cobble theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- themerex plankWordPress Plank theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- themerex tintWordPress Tint theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- themerex splendourWordPress Splendour theme <= 1.23 - Local File Inclusion vulnerability8.1 High
- themerex gableWordPress Gable theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- cnvrseWordPress Cnvrse plugin < 026.02.10.20 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- jthemes exzoWordPress Exzo theme <= 1.2.4 - Broken Access Control vulnerability7.5 High
- itex imoneyWordPress iMoney plugin <= 0.36 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- gt3themes diamondWordPress Diamond theme <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- themebon business template blocks for wpbakery (visual composer) page builderWordPress Business Template Blocks for WPBakery (Visual Composer) Page Builder plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- hugh mungus visitor maps extended referer fieldWordPress Visitor Maps Extended Referer Field plugin <= 1.2.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- cliengo – chatbotWordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability6.5 Medium
- whatwouldjessedo simple retail menusWordPress Simple Retail Menus plugin <= 4.2.1 - Local File Inclusion vulnerability7.5 High
- Show moreLoading…