CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- themerex orpheusWordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability9.8 Critical
- themerex nutsWordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability9.8 Critical
- themerex muziconWordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability9.8 Critical
- themerex motorixWordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability9.8 Critical
- themerex missionWordPress Mission theme <= 1.22 - PHP Object Injection vulnerability9.8 Critical
- themerex meals & wheelsWordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability9.8 Critical
- themerex marcellWordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability9.8 Critical
- themerex le truffeWordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability9.8 Critical
- themerex legal stoneWordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability9.8 Critical
- favethemes mls on the flyWordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability8.5 High
- emarket-design youtube showcaseWordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- blockonomicsWordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- eyal fitoussi geo my wordpressWordPress GEO my WordPress plugin <= 4.5.5.4 - PHP Object Injection vulnerability9.8 Critical
- ajax load more ajaxloadmore cacheWordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability10.0 Critical
- merv barrett easy property listingsWordPress Easy Property Listings plugin <= 3.5.25 - Cross Site Scripting (XSS) vulnerability7.1 High
- joe hawes auction nudge – your ebay on your siteWordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- razorpay payment button elementor pluginWordPress Razorpay Payment Button Elementor Plugin plugin <= 1.2.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- podamibe nepal custom user gravatarWordPress Podamibe Custom User Gravatar plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- nicashmu post video playersWordPress Post Video Players plugin <= 1.165 - Cross Site Scripting (XSS) vulnerability7.1 High
- themerex ozistiWordPress Ozisti theme <= 1.1.10 - PHP Object Injection vulnerability9.8 Critical
- themerex preservationWordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability9.8 Critical
- themerex printyWordPress Printy theme <= 1.13.0 - PHP Object Injection vulnerability9.8 Critical
- themerex quirkyWordPress Quirky theme <= 1.23 - PHP Object Injection vulnerability9.8 Critical
- themerex rexcoinWordPress RexCoin theme <= 1.2.6 - PHP Object Injection vulnerability9.8 Critical
- yaycommerce yaymailWordPress YayMail plugin <= 4.4.6 - PHP Object Injection vulnerability7.2 High
- themeum wp crowdfundingWordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- thimpress learnpressWordPress LearnPress plugin <= 4.4.10 - Broken Access Control vulnerability5.4 Medium
- imithemes eventerWordPress Eventer plugin <= 0.1.1 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- global payments globalpayments woocommerceWordPress GlobalPayments WooCommerce plugin <= 1.23.3 - Cross Site Scripting (XSS) vulnerability7.1 High
- synacor zimbra collaborationStored Cross-Site Scripting in Zimbra5.3 Medium
- synacor zimbra collaborationStored Cross-Site Scripting in Zimbra5.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability7.4 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.1 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability5.4 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge for Android Security Feature Bypass Vulnerability4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- microsoft edge, edge (chromium-based) +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities9.8 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities5.0 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.5 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.8 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities4.3 Medium
- Show moreLoading…