CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- silabs emberznetIAS Zone enroll invalid table index and write in EmberZNet 9.0.27.1 High
- silabs emberznetDoor Lock GetUserType invalid table index in EmberZNet v9.0.27.1 High
- silabs emberznetGroups GetGroupMembership count/list-length mismatch in EmberZNet v9.0.27.1 High
- dell display and peripheral managerDell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent...6.7 Medium
- silabs emberznetOTA server raw parser missing per-field bounds validation in EmberZNet v9.0.27.1 High
- silabs emberznetColor Control color-temperature assertion abort in EmberZNet v9.0.27.1 High
- silabs emberznetColor Control hue/saturation assertion abort in EmberZNet v9.0.27.1 High
- themeisle ppom for woocommerceWordPress PPOM for WooCommerce plugin <= 33.0.18 - Broken Access Control vulnerability6.5 Medium
- rickknowles winstone servlet containerWinstone Servlet Engine 0.9.10 Path Traversal via HTTP Request Paths8.7 High
- silabs emberznetGlobal ZCL command parser missing minimum-length validation in EmberZNet v9.0.27.1 High
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous...9.8 Critical
- silabs.com sisdkIncorrect use of the PUF key for user key generation in EFR32xG27 results in predictable keys8.4 High
- saad iqbal apiexperts square for woocommerceWordPress APIExperts Square for WooCommerce plugin <= 4.7.3 - Sensitive Data Exposure vulnerability8.3 High
- jacob n. breetvelt wp photo album plusWordPress WP Photo Album Plus plugin <= 9.1.13.005 - SQL Injection vulnerability7.5 High
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a...7.2 High
- dell display and peripheral managerDell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper...7.8 High
- wssoffice21 ymc filter, ymc filter +1 moreWordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability9.3 Critical
- powerdns recursorReject more queries with invalid header values5.3 Medium
- royal plugins mcpWordPress Royal MCP plugin <= 1.4.25 - Broken Access Control vulnerability8.1 High
- devolutions serverImproper input validation in the PAM AD discovery endpoints in Devolutions Server 2026.2.4.0...2.7 Low
- anh tran slim seoWordPress Slim SEO plugin <= 4.6.2 - Broken Access Control vulnerability6.5 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- ahmad js help deskWordPress JS Help Desk plugin <= 3.1.1 - Arbitrary File Deletion vulnerability7.7 High
- eventprimeWordPress EventPrime plugin <= 4.3.4.1 - PHP Object Injection vulnerability8.8 High
- tablepressWordPress TablePress plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- post snippets snippets, saad iqbal post snippets +1 moreWordPress Post Snippets plugin <= 4.0.19 - Remote Code Execution (RCE) vulnerability8.5 High
- algolplus advanced order export for woocommerceWordPress Advanced Order Export For WooCommerce plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- knit pay upi qr code payment gateway for woocommerceWordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.2 - Broken Access Control vulnerability5.4 Medium
- averta master sliderWordPress Master Slider plugin <= 3.11.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- mycred license manager for woocommerceWordPress License Manager for WooCommerce plugin <= 3.0.15 - Insecure Direct Object References (IDOR) vulnerability6.5 Medium
- h5pWordPress H5P plugin <= 1.17.6 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- melapress wp activity logWordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- premmerce wishlist for woocommerceWordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability9.3 Critical
- pluginus.net mdtfWordPress MDTF plugin <= 1.3.8 - Local File Inclusion vulnerability8.1 High
- checkview automated testingWordPress CheckView Automated Testing plugin <= 2.1.0 - Broken Access Control vulnerability7.5 High
- pluginus.net mdtfWordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability9.3 Critical
- appsbd viteposWordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerability7.5 High
- rymera web co wc vendors marketplaceWordPress WC Vendors Marketplace plugin <= 2.6.8 - SQL Injection vulnerability8.5 High
- etoile web design incorporated five star restaurant reservationsWordPress Five Star Restaurant Reservations plugin <= 2.7.19 - Broken Access Control vulnerability7.5 High
- stylemixthemes motorsWordPress Motors plugin <= 1.4.109 - Broken Access Control vulnerability7.5 High
- marketing fire widget optionsWordPress Widget Options plugin <= 4.2.3 - Remote Code Execution (RCE) vulnerability9.9 Critical
- salesmanago & leadooWordPress SALESmanago & Leadoo plugin <= 3.11.2 - SQL Injection vulnerability8.5 High
- bootstrapped ventures visual link previewWordPress Visual Link Preview plugin <= 2.3.1 - Sensitive Data Exposure vulnerability7.4 High
- mainwp childWordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability7.5 High
- elementor website builderWordPress Elementor Website Builder plugin <= 4.1.3 - Sensitive Data Exposure vulnerability6.5 Medium
- powerdns recursorSpoofed answers can mark an authoritative non-EDNS capable5.9 Medium
- powerdns recursorZONEMD validation can be bypassed5.3 Medium
- powerdns recursorMissing input validation for catalog zones5.9 Medium
- powerdns recursorInsufficient input validation in ZoneToCache5.9 Medium
- powerdns recursorInformation about ECS zero scoped answers might leak to clients that use a specific ECS5.3 Medium
- Show moreLoading…