CVE-2026-66564 — Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2302Éléments
17087 derniers jours
209Aujourd'hui
924Critique + haute
11/10/2026 19:32Dernière collecte
CVE-2026-66563 — Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66483 — Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66482 — Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66481 — Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
CVSS 6.8
NVD · CVE récentesCWE-22
CVE-2026-66480 — Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooComm…
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-…
CVSS 5.3
NVD · CVE récentesCWE-497
CVE-2026-65459 — Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
CVSS 7.5
NVD · CVE récentesCWE-862
CVE-2026-62130 — Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVSS 7.2
NVD · CVE récentesCWE-502
CVE-2026-62129 — Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
CVSS 9.9
NVD · CVE récentesCWE-434
CVE-2026-62125 — Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62124 — Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-62123 — Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.
CVSS 9.8
NVD · CVE récentesCWE-502