Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.1 CVE-2026-27430

WordPress TheFox theme <= 3.9.76 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-27430

Unauthenticated Cross Site Scripting (XSS) in TheFox

tranmautritam TheFox n/a CVE
HIGH 7.1 CVE-2026-27426

WordPress Automotive Car Dealership Business theme <= 13.3.3 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-27426

Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business

Themesuite Automotive Car Dealership Business n/a CVE
HIGH 7.1 CVE-2026-27425

WordPress Automotive Listings plugin <= 18.6 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-27425

Unauthenticated Cross Site Scripting (XSS) in Automotive Listings

Themesuite Automotive Listings n/a CVE
CRITICAL 9.9 CVE-2026-27419

WordPress Zegen theme <= 1.1.9 - Arbitrary File Upload vulnerability_CVE-2026-27419

Subscriber Arbitrary File Upload in Zegen

Zozothemes Zegen n/a CVE
HIGH 8.8 CVE-2026-27414

WordPress Werkstatt theme <= 4.8.3 - PHP Object Injection vulnerability_CVE-2026-27414

Contributor PHP Object Injection in Werkstatt

Fuelthemes Werkstatt n/a CVE
HIGH 8.1 CVE-2026-27412

WordPress Pearl – Corporate Business theme <= 3.4.10 - Local File Inclusion vulnerability_CVE-2026-27412

Unauthenticated Local File Inclusion in Pearl - Corporate Business

StylemixThemes Pearl - Corporate Business n/a CVE
HIGH 7.1 CVE-2026-27408

WordPress NativeChurch theme <= 4.8.8.2 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-27408

Unauthenticated Cross Site Scripting (XSS) in NativeChurch

imithemes NativeChurch n/a CVE
HIGH 7.1 CVE-2026-27404

WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability_CVE-2026-27404

Unauthenticated Cross Site Scripting (XSS) in LMS

Designthemes LMS n/a CVE
HIGH 7.1 CVE-2026-27402

WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability_CVE-2026-27402

Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress

Designthemes Kids Life | Children School WordPress n/a CVE
HIGH 8.8 CVE-2026-27060

WordPress ARMember Premium plugin <= 7.0 - PHP Object Injection vulnerability_CVE-2026-27060

Contributor PHP Object Injection in ARMember Premium

Reputeinfosystems ARMember Premium n/a CVE