Latest CVE Feed
Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.
Score
Vulnerability
Published
6.5
MEDIUM
CVE-2026-1235
— WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection
The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadget is present on…
Remote
|
Injection
Feb 11, 2026
Feb 11, 2026
Feb 11, 2026
Feb 11, 2026
6.5
MEDIUM
CVE-2025-15400
— OpenPix <= 2.13.3 - Subscriber+ Payment Gateway Settings Reset
The Pix para Woocommerce WordPress plugin through 2.13.3 allows any authenticated user to trigger AJAX actions that reset payment gateway configuration options without capability or nonce checks. Th…
Remote
|
Authentication
Feb 11, 2026
Feb 11, 2026
Feb 11, 2026
Feb 11, 2026