CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- wp travel gutenberg blocksWordPress WP Travel Gutenberg Blocks plugin <= 3.9.4 - SQL Injection vulnerability9.3 Critical
- e-plugins jobbankWordPress JobBank plugin <= 1.2.3 - Broken Access Control vulnerability7.3 High
- emv jobcareerWordPress JobCareer theme <= 7.3 - Arbitrary File Deletion vulnerability8.6 High
- emv creatifyWordPress Creatify theme <= 1.5 - PHP Object Injection vulnerability9.8 Critical
- emv the hospitalWordPress The Hospital theme <= 1.8.1 - PHP Object Injection vulnerability9.8 Critical
- rxi microtarStack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field8.7 High
- brainstorm force suredashWordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability8.5 High
- simplcommerceCross-Site Request Forgery (CSRF) in SimplCommerce News Module6.9 Medium
- stylemixthemes motorsWordPress Motors plugin <= 1.4.109 - Local File Inclusion vulnerability8.1 High
- cargo rd shipping location for woocommerceWordPress Cargo Shipping Location for WooCommerce plugin <= 5.6 - SQL Injection vulnerability9.3 Critical
- monetizemore advanced adsWordPress Advanced Ads plugin <= 2.0.21 - Remote Code Execution (RCE) vulnerability7.5 High
- fluxbuilder mstore api, mstore api +1 moreWordPress MStore API plugin <= 4.18.4 - Broken Authentication vulnerability6.5 Medium
- veronalabs slimstat analyticsWordPress Slimstat Analytics plugin <= 5.4.11 - SQL Injection vulnerability8.5 High
- rxi microtarInteger Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS8.7 High
- webilia inc. listdomWordPress Listdom plugin <= 5.4.0 - SQL Injection vulnerability9.3 Critical
- themeton the barber shopWordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability9.8 Critical
- zephyrproject zephyrOut-of-bounds write in Bluetooth HFP Hands-Free CIND indicator parsing (cind_handle_values)7.1 High
- themeton lagomWordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability9.8 Critical
- apache shiroApache Shiro: LDAP DN Injection in DefaultLdapRealm8.8 High
- purethemes workscout-coreWordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability6.5 Medium
- mikado-themes kastellWordPress Kastell theme <= 2.0 - Local File Inclusion vulnerability8.1 High
- park of ideas modernoWordPress Moderno theme < 1.43 - PHP Object Injection vulnerability9.8 Critical
- mikado-themes châteauWordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability8.1 High
- mikado-themes zoyaWordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability8.1 High
- select-themes manufaktur solutionsWordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability8.1 High
- edge-themes eldonWordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability8.1 High
- mikado-themes shiftupWordPress ShiftUp theme <= 1.3 - PHP Object Injection vulnerability8.1 High
- royal elementor addons proWordPress Royal Elementor Addons Pro plugin < 1.7.1041 - Cross Site Scripting (XSS) vulnerability7.1 High
- thememove atomlabWordPress Atomlab theme <= 2.4.5 - Local File Inclusion vulnerability8.1 High
- elated-themes singlemaltWordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerability8.1 High
- select-themes hiroshiWordPress Hiroshi theme <= 1.5.1 - PHP Object Injection vulnerability8.1 High
- codesupplyco uppercaseWordPress Uppercase theme < 1.2.2 - Local File Inclusion vulnerability8.1 High
- elated-themes konseptWordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability8.1 High
- elated-themes solene coreWordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability8.1 High
- presslayouts alukasWordPress Alukas theme < 3.0.0 - PHP Object Injection vulnerability8.1 High
- presslayouts pressmartWordPress PressMart theme <= 1.2.26 - PHP Object Injection vulnerability8.1 High
- themerex line agencyWordPress Line Agency theme <= 1.3.1 - Local File Inclusion vulnerability8.1 High
- themerex etudeWordPress Etude theme <= 1.6 - Local File Inclusion vulnerability8.1 High
- themerex eventicityWordPress Eventicity theme <= 1.5 - Local File Inclusion vulnerability8.1 High
- themerex gunslingerWordPress Gunslinger theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- themerex skywardWordPress Skyward theme <= 1.10 - Local File Inclusion vulnerability8.1 High
- themerex granolaWordPress Granola theme <= 1.13 - Local File Inclusion vulnerability8.1 High
- themerex gamicWordPress Gamic theme <= 1.15 - Local File Inclusion vulnerability8.1 High
- themerex preservationWordPress Preservation theme <= 1.10 - Local File Inclusion vulnerability8.1 High
- seventhqueen sweetdate coreWordPress SweetDate Core plugin < 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- pixel makers creative inc. entrepreneur - booking for small businesses wordpress themeWordPress Entrepreneur - Booking for Small Businesses WordPress Theme theme < 3.1.5 - PHP Object Injection vulnerability8.8 High
- themerex plumbingWordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability9.8 Critical
- themerex fortiusWordPress Fortius theme <= 2.3.0 - Local File Inclusion vulnerability8.1 High
- themerex snow clubWordPress Snow Club theme <= 1.1 - Local File Inclusion vulnerability8.1 High
- themerex dazzleWordPress Dazzle theme <= 1.0.0 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…