CVE-2026-66565 — Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
3123Items
2008Last 7 days
38Today
1218Critical + high
13/10/2026 03:35Last collection
CVE-2026-66564 — Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66563 — Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66483 — Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66482 — Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66481 — Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
CVSS 6.8
NVD · CVE récentesCWE-22
CVE-2026-66480 — Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooComm…
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-…
CVSS 5.3
NVD · CVE récentesCWE-497
CVE-2026-65459 — Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
CVSS 7.5
NVD · CVE récentesCWE-862
CVE-2026-62130 — Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVSS 7.2
NVD · CVE récentesCWE-502
CVE-2026-62129 — Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
CVSS 9.9
NVD · CVE récentesCWE-434
CVE-2026-62125 — Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62124 — Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVSS 9.8
NVD · CVE récentesCWE-502