Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.1Deserialization of Untrusted Data vulnerability in BoldThemes Celeste celeste allows Object Injection.This issue affects Celeste: from n/a through <= 1.3.6.Mar 5, 2026
- High8.8Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7.Mar 5, 2026
- High8.1Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au…Mar 5, 2026
- High7.5Deserialization of Untrusted Data vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Object Injection.This issue affects Podlove Web Player:…Mar 5, 2026
- High8.8Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a…Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2.EPSS 0.5%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2.EPSS 0.5%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.EPSS 0.4%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a…EPSS 0.4%Mar 5, 2026
- High8.8Deserialization of Untrusted Data vulnerability in designthemes Dental Clinic dental allows Object Injection.This issue affects Dental Clinic: from n/a through <= 3.7.EPSS 0.4%Mar 5, 2026
- High8.8Deserialization of Untrusted Data vulnerability in maximsecudeal Secudeal Payments for Ecommerce secudeal-payments-for-ecommerce allows Object Injection.This issue aff…EPSS 0.4%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects Solaris: from n/a through <= 2.5.EPSS 0.5%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through <= 2.3.EPSS 0.5%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7.EPSS 0.5%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11.EPSS 0.5%Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Classter classter allows Object Injection.This issue affects Classter: from n/a through <= 2.5.EPSS 0.5%Mar 5, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityKEVEPSS 43.2%Mar 4, 2026
- High8.9Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter.Mar 4, 2026
- Critical9.2Qwik is a performance focused javascript framework.Mar 3, 2026
- Critical9.8An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) componentEPSS 0.5%Mar 3, 2026
- High7.0Chamilo is a learning management system.EPSS 0.4%Mar 2, 2026
- High8.8Chamilo is a learning management system.EPSS 0.4%Mar 2, 2026
- High8.7Chamilo is a learning management system.EPSS 0.9%Mar 2, 2026
- Critical9.3U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the serve…Mar 2, 2026
- High7.5The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from…Feb 28, 2026