WordPress theme

Over 15,000 Sites at Risk: Woffice WordPress Theme Vulnerabilities Could Lead to Full Site Takeovers

WordPress Privilege Escalation CVE-2026-1492 Sneeit Framework RCE, Unauthenticated Code Execution Post SMTP, Account Takeover WordPress Vulnerability, Unpatched XSS WordPress Vulnerability, PHP Object Injection WordPress AI Engine, Privilege Escalation CVE-2024-43153 & CVE-2024-43234

Over 15,000 Sites at Risk: Woffice WordPress Theme Vulnerabilities Could Lead to Full Site Takeovers

Do Son December 13, 2024

Discover the critical vulnerabilities in the Woffice WordPress theme, rated at CVSS 9.8 severity. Learn how unauthenticated users can register with any role, posing a security risk.

CVE-2024-43222 (CVSS 9.8): Critical Flaw in Sweet Date WordPress Theme Exposes Thousands of Sites to Potential Takeovers

CVE-2024-43222

CVE-2024-43222 (CVSS 9.8): Critical Flaw in Sweet Date WordPress Theme Exposes Thousands of Sites to Potential Takeovers

Do Son December 5, 2024

Stay informed about the flaw (CVE-2024-43222) in the Sweet Date WordPress theme. Learn how to secure your website and prevent unauthorized access

CVE-2024-2848: Actively Exploited Vulnerability Found in Popular Responsive WordPress Theme

CVE-2024-2848

CVE-2024-2848: Actively Exploited Vulnerability Found in Popular Responsive WordPress Theme

Do Son April 22, 2024

CVE-2024-2848 with a CVSS score of 7.5, involves a missing authorization check within the save_footer_text_callback function

Themify Ultra: A Popular Theme with Critical Security Vulnerabilities CVE-2023-46149 CVE-2023-46148

CVE-2023-46149 CVE-2023-46148

Themify Ultra: A Popular Theme with Critical Security Vulnerabilities

Do Son December 12, 2023

The first vulnerability, tagged as CVE-2023-46149 with a CVSS score of 9.8, exposes a terrifying reality: Authenticated Arbitrary File Upload

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-118539
This module enables you to sell goods and services to customers through an included shopping cart and checkout...
Admin intel📅 Updated: Oct 29, 2026
CVE-2022-31034CVSS 8.3
Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
Watchtower Verified📅 Updated: Oct 29, 2026
CVE-2026-112353CVSS 6.2
GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
Watchtower Verified📅 Updated: Oct 29, 2026
CVE-2026-116779CVSS 9.8
Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-97229CVSS 10.0
GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-76418CVSS 8.6
A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
Admin intel📅 Updated: Oct 29, 2026
CVE-2026-116690CVSS 7.5
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
Admin intel📅 Updated: Oct 28, 2026
CVE-2026-101767CVSS 9.8
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
Admin intel📅 Updated: Oct 28, 2026

CVE-2026-83748CVSS 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
📅 Updated: Oct 29, 2026
CVE-2026-90531CVSS 9.6
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could...
📅 Updated: Oct 29, 2026
CVE-2026-103093CVSS 9.4
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability...
📅 Updated: Oct 29, 2026
CVE-2026-112380CVSS 9.0
Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a...
📅 Updated: Oct 29, 2026
CVE-2026-83910CVSS 9.8
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
📅 Updated: Oct 29, 2026
CVE-2026-97406CVSS 9.1
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint,...
📅 Updated: Oct 29, 2026
CVE-2026-91230CVSS 9.3
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are...
📅 Updated: Oct 29, 2026
CVE-2026-91231CVSS 10.0
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected...
📅 Updated: Oct 29, 2026