CVEs published in June 2026
8,400 vulnerabilities, 981 critical, 27 exploited.
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +14 more +16 moreAn observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute...5.6 Medium
- canonical lxdLXD Snapshot Import Privilege Escalation Vulnerability7.2 High
- safetica endpoint clientKernel driver vulnerability in Safetica Endpoint Client7.5 High
- edgewall *genshi* genshiServer side template inject (SSTI) in Edgewall Genshi Template Engine9.8 Critical
- amd ryzen™ 3000 series desktop processors, ryzen™ 5000 series desktop processors, ryzen™ threadripper™ 3000 series processors +2 more +4 moreAn observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute...1.8 Low
- cisco cloudUnprotected temporary directories in Wolfram Cloud may result in privilege escalation9.6 Critical
- canonical lxdAuthenticated Denial of Service via Malicious Backup Tarball in LXD6.5 Medium
- canonical lxdBroken Access Control in Canonical LXD DevLXD API8.4 High
- dakku tealium iq tag managementTealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-0648.1 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted7.8 High
- ollamaThere exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine7.5 High
- imaginationtech ddk, imagination technologies graphics ddk +1 moreGPU DDK - libusc OOB write at TreeRemove during WebGPU shader compilation7.7 High
- adrian tobey groundhoggWordPress Groundhogg plugin <= 4.5 - SQL Injection vulnerability8.5 High
- gravitykit gravityviewWordPress GravityView plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- villatheme bopo – woocommerce product bundle builderWordPress Bopo – WooCommerce Product Bundle Builder plugin <= 1.1.6 - Sensitive Data Exposure vulnerability4.3 Medium
- igor benic recipe maker for your food blog from zip recipesWordPress Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.2.7 - SQL Injection vulnerability8.5 High
- wasiliy strecker contest galleryWordPress Contest Gallery plugin <= 30.0.0 - SQL Injection vulnerability8.5 High
- nexcess wpcompleteWordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability5.4 Medium
- magepeopleteam booking and rental managerWordPress Booking and Rental Manager plugin <= 2.7.1 - Broken Access Control vulnerability5.3 Medium
- stranger studios paid memberships pro - add member from adminWordPress Paid Memberships Pro - Add Member From Admin plugin <= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerability8.8 High
- templatespareWordPress TemplateSpare plugin <= 4.2.0 - Arbitrary File Upload vulnerability9.1 Critical
- noor alam gmail smtpWordPress Gmail SMTP plugin <= 1.2.3.19 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- peregrinethemes hester coreWordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability5.9 Medium
- jay versluis child theme wizardWordPress Child theme Wizard plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability8.2 High
- mra13 affiliates managerWordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerability6.5 Medium
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.5.2 - SQL Injection vulnerability8.5 High
- joomsky js help deskWordPress JS Help Desk plugin <= 3.1.0 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- nk ghost kitWordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- blockart magazine blocksWordPress Magazine Blocks plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- studiowombat shoppable images liteWordPress Shoppable Images Lite plugin <= 1.3 - Broken Access Control vulnerability4.3 Medium
- nelio software contentWordPress Nelio Content plugin <= 4.3.4 - Broken Access Control vulnerability4.3 Medium
- bplugins panorama viewer – 360 degree image + video viewerWordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability7.5 High
- majestic support supportWordPress Majestic Support plugin <= 1.1.7 - Insecure Direct Object References (IDOR) vulnerability5.4 Medium
- tribulant software newslettersWordPress Newsletters plugin <= 4.13 - Broken Access Control vulnerability8.1 High
- jetmonsters restaurant menu by motopressWordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability8.5 High
- af themes wp post authorWordPress WP Post Author plugin <= 3.9.1 - SQL Injection vulnerability8.5 High
- bestwebsoft galleryWordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability8.5 High
- contempo themes real estate 7WordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.7.30 - Broken Access Control vulnerability4.3 Medium
- shahjahan jewel fluent bookingWordPress Fluent Booking plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- tyche softwares abandoned cart lite for woocommerceWordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- tomdever wpforo forumWordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerability8.5 High
- funnelkit payment gateway for stripe woocommerceWordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability6.5 Medium
- wp folio team ppwpWordPress PPWP plugin <= 1.9.19 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- wcboost – products compareWordPress WCBoost – Products Compare plugin <= 1.1.0 - Sensitive Data Exposure vulnerability5.3 Medium
- omnisend email marketing for woocommerce by omnisendWordPress Email Marketing for WooCommerce by Omnisend plugin <= 1.19.0 - Broken Access Control vulnerability5.4 Medium
- ays pro popup boxWordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability7.6 High
- creative themes blocksy companion proWordPress Blocksy Companion Pro plugin <= 2.1.46 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- statcounterWordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- soflyy wp all import, wp all import all import +1 moreWordPress WP All Import plugin <= 4.0.1 - SQL Injection vulnerability7.6 High
- Show moreLoading…