Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.
Matching cohort: 16,156 published records · 17 KEV · 15,829 with a forecast · 0 unknown dates
16,156 matching published records · 0 with an unknown publication date
Every segment and month is a link that preserves the other filters.
Share of cohort: KEV 0.11% · forecast 98% · unscored 22%.
WordPress Gamic theme <= 1.19 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Gamic <= 1.19 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:24.535Z. Updated 2026-10-29T15:25:43.401Z.
WordPress Gamezone theme <= 1.1.11 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:23.807Z. Updated 2026-10-29T15:25:42.014Z.
WordPress EmojiNation theme <= 1.0.12 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:23.059Z. Updated 2026-10-29T15:25:40.608Z.
WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:22.290Z. Updated 2026-10-29T15:25:39.152Z.
WordPress Coinpress theme <= 1.0.15 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:21.539Z. Updated 2026-10-29T15:25:37.782Z.
WordPress Bonbon theme <= 1.11 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:20.782Z. Updated 2026-10-29T15:25:36.364Z.
WordPress Avventure theme <= 1.1.12 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:20.043Z. Updated 2026-10-29T15:25:34.958Z.
WordPress Filmax theme <= 1.1.11 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:19.287Z. Updated 2026-10-29T15:25:33.601Z.
WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Orpheus <= 1.8 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:18.536Z. Updated 2026-10-29T15:25:32.177Z.
WordPress Nuts theme <= 1.12 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Nuts <= 1.12 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:17.789Z. Updated 2026-10-29T15:25:29.219Z.
WordPress Muzicon theme <= 1.15 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Muzicon <= 1.15 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:17.046Z. Updated 2026-10-29T15:25:27.754Z.
WordPress Motorix theme <= 1.11 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Motorix <= 1.11 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:16.292Z. Updated 2026-10-29T15:25:26.379Z.
WordPress Mission theme <= 1.22 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Mission <= 1.22 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:15.533Z. Updated 2026-10-29T15:25:24.938Z.
WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Meals & Wheels <= 1.1.13 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:14.783Z. Updated 2026-10-29T15:25:23.534Z.
WordPress Marcell theme <= 1.2.14 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Marcell <= 1.2.14 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:14.045Z. Updated 2026-10-29T15:25:22.157Z.
WordPress Le Truffe theme <= 1.1.7 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Le Truffe <= 1.1.7 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:13.299Z. Updated 2026-10-29T15:25:20.760Z.
WordPress Legal Stone theme <= 1.2.11 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Legal Stone <= 1.2.11 versions.
Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:12.567Z. Updated 2026-10-29T15:25:19.357Z.
WordPress MLS On The Fly plugin <= 1.8.1.5 - SQL Injection vulnerability
Subscriber SQL Injection in MLS On The Fly <= 1.8.1.5 versions.
Severity high: primary CNA CVSS 8.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:11.830Z. Updated 2026-10-29T15:25:17.968Z.
WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in YouTube Showcase <= 4.1.0 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:10.950Z. Updated 2026-10-29T15:24:10.950Z.
WordPress Blockonomics plugin 3.11.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Blockonomics 3.11.0 versions.
Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. EPSS unavailable for this snapshot.
Published 2026-10-29T15:24:10.200Z. Updated 2026-10-29T15:24:10.200Z.