CVE-2026-48193 — Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
Cyber Threat Dashboard
Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
2461Éléments
17037 derniers jours
59Aujourd'hui
988Critique + haute
12/10/2026 07:32Dernière collecte
CVE-2026-45440 — Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions.
CVSS 7.6
NVD · CVE récentesCWE-89
CVE-2026-42777 — Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-42724 — Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions.
CVSS 8.1
NVD · CVE récentesCWE-98
CVE-2026-42723 — Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-42722 — Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.
Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions.
CVSS 7.6
NVD · CVE récentesCWE-89
CVE-2026-42719 — Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-42718 — Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-42717 — Administrator SQL Injection in Leyka <= 3.32.3 versions.
Administrator SQL Injection in Leyka <= 3.32.3 versions.
CVSS 7.6
NVD · CVE récentesCWE-89
CVE-2026-42716 — Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.
CVSS 9.8
NVD · CVE récentesCWE-502
CVE-2026-42715 — Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions.
CVSS 7.1
NVD · CVE récentesCWE-79
CVE-2026-42712 — Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
CVSS 8.5
NVD · CVE récentesCWE-89