CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.30)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
PHP Object Injection vulnerability in the Edge Decor theme in versions up to and including 2.9. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.
PHP Object Injection vulnerability in the Coinpress theme in versions up to and including 1.0.15. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.
PHP Object Injection vulnerability in the Bonbon theme in versions up to and including 1.11. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.
PHP Object Injection vulnerability in the Avventure theme in versions up to and including 1.1.12. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.
PHP Object Injection vulnerability in the Filmax theme in versions up to and including 1.1.11. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.
PHP Object Injection vulnerability in the Orpheus theme in versions up to and including 1.8. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.
PHP Object Injection vulnerability in the Nuts theme in versions up to and including 1.12. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.
PHP Object Injection vulnerability in the Muzicon theme in versions up to and including 1.15. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the Motorix theme in versions up to and including 1.11. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the Mission theme in versions up to and including 1.22. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the Meals & Wheels theme in versions up to and including 1.1.13. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the Marcell theme in versions up to and including 1.2.14. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the Le Truffe theme in versions up to and including 1.1.7. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the Legal Stone theme in versions up to and including 1.2.11. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the GEO my WordPress plugin in versions up to and including 4.5.5.3. It can be exploited by an unauthenticated attacker.
Remote Code Execution (RCE) vulnerability in the AjaxLoadMore Cache plugin in versions up to and including 3.1.1. It can be exploited by an unauthenticated attacker.
PHP Object Injection vulnerability in the Ozisti theme in versions up to and including 1.1.10. It can be exploited by an unauthenticated attacker.
The Preservation plugin in versions up to and including 1.15 contains an unauthenticated PHP Object Injection vulnerability.
The Printy plugin in versions up to and including 1.13.0 contains an unauthenticated PHP Object Injection vulnerability.
The Quirky plugin in versions up to and including 1.23 contains an unauthenticated PHP Object Injection vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS