CVE-2026-66568 — Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2372Éléments
17247 derniers jours
225Aujourd'hui
984Critique + haute
11/10/2026 23:32Dernière collecte
CVE-2026-66567 — Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66566 — Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-66565 — Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66564 — Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66563 — Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66483 — Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66482 — Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-66481 — Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
CVSS 6.8
NVD · CVE récentesCWE-22
CVE-2026-66480 — Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooComm…
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This issue affects YITH WooCommerce Product Add-…
CVSS 5.3
NVD · CVE récentesCWE-497
CVE-2026-65459 — Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
CVSS 7.5
NVD · CVE récentesCWE-862
CVE-2026-62130 — Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.
CVSS 7.2
NVD · CVE récentesCWE-502