CVE-2026-66481 — Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
CVSS 6.8
NVD · CVE récentesCWE-22
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
3083Items
2030Last 7 days
81Today
1174Critical + high
13/10/2026 07:36Last collection
CVE-2026-66480 — Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooComm…
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-…
CVSS 5.3
NVD · CVE récentesCWE-497
CVE-2026-65459 — Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
CVSS 7.5
NVD · CVE récentesCWE-862
CVE-2026-62130 — Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVSS 7.2
NVD · CVE récentesCWE-502
CVE-2026-62129 — Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
CVSS 9.9
NVD · CVE récentesCWE-434
CVE-2026-62125 — Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62124 — Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62123 — Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62120 — Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62118 — Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVSS 7.3
NVD · CVE récentesCWE-862
CVE-2026-62117 — Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVSS 8.5
NVD · CVE récentesCWE-89
CVE-2026-62116 — Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versio…
Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions.
CVSS 7.1
NVD · CVE récentesCWE-79