CVEs published on March 5, 2026

366 vulnerabilities, ordered with the most urgent first.

8.1 High severity
Maxify: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27997Mar 5, 2026ThemeREX
8.1 High severity
Yungen: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28006Mar 5, 2026ThemeREX
8.1 High severity
Translogic: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28014Mar 5, 2026ThemeREX
8.1 High severity
Craftis: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28021Mar 5, 2026ThemeREX
8.1 High severity
Bonbon: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28030Mar 5, 2026ThemeREX
8.1 High severity
Beacon: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28050Mar 5, 2026ThemeREX
8.1 High severity
Edge Decor: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28064Mar 5, 2026ThemeREX
8.1 High severity
Ussd Gateway: Improper Access Control
CVE-2025-70614Mar 5, 2026Opencode
8.1 High severity
Etchy: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-22476Mar 5, 2026Elated-Themes
8.1 High severity
Felizia: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-22477Mar 5, 2026AncoraThemes
8.1 High severity
Cognix Platform: Improper Access Control
CVE-2026-26417Mar 5, 2026Tcs
8.1 High severity
Au Pair Agency - Babysitting & Nanny Theme: Deserialization of Untrusted Data
CVE-2026-27098Mar 5, 2026AxiomThemes
8.1 High severity
Alchemists: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27334Mar 5, 2026Dan Fisher
8.1 High severity
TopScorer - Sports WordPress Theme: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27341Mar 5, 2026Mikado-Themes
8.1 High severity
Celeste: Deserialization of Untrusted Data
CVE-2026-27369Mar 5, 2026BoldThemes
8.1 High severity
Aora: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27381Mar 5, 2026Thembay
8.1 High severity
Humanum: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27985Mar 5, 2026ThemeREX
8.1 High severity
OsTende: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27986Mar 5, 2026ThemeREX
8.1 High severity
The Qlean: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27987Mar 5, 2026ThemeREX
8.1 High severity
Equadio: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27988Mar 5, 2026ThemeREX
8.1 High severity
Quanzo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27989Mar 5, 2026ThemeREX
8.1 High severity
ConFix: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27990Mar 5, 2026ThemeREX
8.1 High severity
Avventure: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27991Mar 5, 2026ThemeREX
8.1 High severity
Aldo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27993Mar 5, 2026ThemeREX
8.1 High severity
Tediss: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27994Mar 5, 2026ThemeREX
8.1 High severity
Justitia: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27995Mar 5, 2026ThemeREX
8.1 High severity
Lingvico: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27996Mar 5, 2026ThemeREX
8.1 High severity
Vixus: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27998Mar 5, 2026ThemeREX
8.1 High severity
Coinpress: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28007Mar 5, 2026ThemeREX
8.1 High severity
DroneX: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28009Mar 5, 2026ThemeREX
8.1 High severity
Scientia: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28010Mar 5, 2026ThemeREX
8.1 High severity
Yottis: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28011Mar 5, 2026ThemeREX
8.1 High severity
Gridiron: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28012Mar 5, 2026ThemeREX
8.1 High severity
Kratz: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28013Mar 5, 2026ThemeREX
8.1 High severity
ShiftCV: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28015Mar 5, 2026ThemeREX
8.1 High severity
Luxury Wine: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28016Mar 5, 2026ThemeREX
8.1 High severity
Green Thumb: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28017Mar 5, 2026ThemeREX
8.1 High severity
Global Logistics: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28018Mar 5, 2026ThemeREX
8.1 High severity
Manoir: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28019Mar 5, 2026ThemeREX
8.1 High severity
Chroma: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28020Mar 5, 2026ThemeREX
8.1 High severity
Foodie: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28022Mar 5, 2026ThemeREX
8.1 High severity
Nuts: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28023Mar 5, 2026ThemeREX
8.1 High severity
Helion: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28024Mar 5, 2026AxiomThemes
8.1 High severity
Stargaze: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28025Mar 5, 2026ThemeREX
8.1 High severity
Motorix: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28026Mar 5, 2026ThemeREX
8.1 High severity
Kayon: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28027Mar 5, 2026ThemeREX
8.1 High severity
MoneyFlow: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28028Mar 5, 2026ThemeREX
8.1 High severity
EmojiNation: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28029Mar 5, 2026ThemeREX
8.1 High severity
Invetex: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28031Mar 5, 2026ThemeREX
8.1 High severity
Tuning: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28032Mar 5, 2026ThemeREX
8.1 High severity
Edifice: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28033Mar 5, 2026ThemeREX
8.1 High severity
Progress: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28034Mar 5, 2026ThemeREX
8.1 High severity
Printy: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28035Mar 5, 2026ThemeREX
8.1 High severity
Grit: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28041Mar 5, 2026AncoraThemes
8.1 High severity
N7 | Golf Club Sports & Events: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28045Mar 5, 2026ThemeREX
8.1 High severity
Law Office: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28046Mar 5, 2026ThemeREX
8.1 High severity
Victo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28047Mar 5, 2026Magentech
8.1 High severity
FlashMart: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28048Mar 5, 2026Magentech
8.1 High severity
Police Department: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28049Mar 5, 2026ThemeREX
8.1 High severity
Yacht Rental: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28051Mar 5, 2026ThemeREX
8.1 High severity
Peter Mason: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28052Mar 5, 2026ThemeREX
8.1 High severity
Miller: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28053Mar 5, 2026ThemeREX
8.1 High severity
Legal Stone: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28054Mar 5, 2026ThemeREX
8.1 High severity
M.Williamson: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28055Mar 5, 2026ThemeREX
8.1 High severity
MCKinney's Politics: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28056Mar 5, 2026ThemeREX
8.1 High severity
Mandala: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28057Mar 5, 2026ThemeREX
8.1 High severity
Dixon: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28058Mar 5, 2026ThemeREX
8.1 High severity
Dermatology Clinic: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28059Mar 5, 2026ThemeREX
8.1 High severity
S.King: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28060Mar 5, 2026ThemeREX
8.1 High severity
Tiger Claw: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28061Mar 5, 2026ThemeREX
8.1 High severity
Happy Baby: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28062Mar 5, 2026ThemeREX
8.1 High severity
Asia Garden: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28063Mar 5, 2026ThemeREX
8.1 High severity
Eject: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28065Mar 5, 2026ThemeREX
8.1 High severity
Legrand: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28066Mar 5, 2026ThemeREX
8.1 High severity
Bassein: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28067Mar 5, 2026ThemeREX
8.1 High severity
Rhythmo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28068Mar 5, 2026ThemeREX
8.1 High severity
Le Truffe: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28069Mar 5, 2026ThemeREX
8.1 High severity
Vapester: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28077Mar 5, 2026ThemeREX
8.1 High severity
Conquerors: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28079Mar 5, 2026AxiomThemes
8.1 High severity
Windsor: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28081Mar 5, 2026ThemeREX
8.1 High severity
Bazinga: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28084Mar 5, 2026ThemeREX
8.1 High severity
Mahogany: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28085Mar 5, 2026ThemeREX
8.1 High severity
Run Gran: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28086Mar 5, 2026ThemeREX
8.1 High severity
Filmax: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28087Mar 5, 2026ThemeREX
8.1 High severity
Aqualots: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28088Mar 5, 2026ThemeREX
8.1 High severity
Daiquiri: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28089Mar 5, 2026ThemeREX
8.1 High severity
Gamezone: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28090Mar 5, 2026ThemeREX
8.1 High severity
Coleo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28091Mar 5, 2026ThemeREX
8.1 High severity
Sounder: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28092Mar 5, 2026ThemeREX
8.1 High severity
Ozisti: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28093Mar 5, 2026ThemeREX
8.1 High severity
RexCoin: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28094Mar 5, 2026ThemeREX
8.1 High severity
Marcell: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28095Mar 5, 2026ThemeREX
8.1 High severity
WealthCo: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28096Mar 5, 2026ThemeREX
8.1 High severity
Artrium: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28097Mar 5, 2026ThemeREX
8.1 High severity
Save Life: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28098Mar 5, 2026ThemeREX
8.1 High severity
Muzicon: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28107Mar 5, 2026ThemeREX
8.1 High severity
smart SEO: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28117Mar 5, 2026AxiomThemes
8.1 High severity
Welldone: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28118Mar 5, 2026AxiomThemes
8.1 High severity
Nirvana: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28119Mar 5, 2026AxiomThemes
8.1 High severity
Dr.Patterson: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28120Mar 5, 2026ThemeREX
8.1 High severity
Anderson: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28121Mar 5, 2026AncoraThemes
8.1 High severity
Veil: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28123Mar 5, 2026AncoraThemes
8.1 High severity
Notarius: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28124Mar 5, 2026AncoraThemes
8.1 High severity
Midi: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28125Mar 5, 2026AncoraThemes
8.1 High severity
Verse: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28128Mar 5, 2026ThemeREX
8.1 High severity
Little Birdies: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28129Mar 5, 2026AxiomThemes
7.5 High severity
RustDesk Client: Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-30791Mar 5, 2026Rustdesk-client
7.5 High severity
RustDesk Client: Cleartext Transmission of Sensitive Information
CVE-2026-30795Mar 5, 2026Rustdesk-client
7.5 High severity
RustDesk Client: Insufficient Verification of Data Authenticity
CVE-2026-30798Mar 5, 2026Rustdesk-client
7.5 High severity
RustDesk Server Pro: Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-3598Mar 5, 2026Rustdesk-server-pro
7.1 High severity
frappe: Improper Access Control
CVE-2026-29077Mar 5, 2026Frappe
7.2 High severity
Fluent Forms Pro Add On Pack: Improper Neutralization of Input During Web Page Generation
CVE-2026-2365Mar 5, 2026Techjewel
7.5 High severity
ionCube tester plus: Improper Limitation of a Pathname to a Restricted Directory
CVE-2025-69411Mar 5, 2026Robert SeyfriedsbergerEPSS 1.74%
7.1 High severity
Avira Internet Security: Improper Link Resolution Before File Access
CVE-2026-27748Mar 5, 2026Gen Digital
7.1 High severity
LambertGroup - AllInOne - Banner with Thumbnails: Improper Neutralization of Input During Web Page Generation
CVE-2026-28108Mar 5, 2026LambertGroup
7.1 High severity
LambertGroup - AllInOne - Banner with Playlist: Improper Neutralization of Input During Web Page Generation
CVE-2026-28110Mar 5, 2026LambertGroup
7.5 High severity
WeDesignTech Ultimate Booking Addon: Missing Authorization
CVE-2025-69340Mar 5, 2026BuddhaThemes
7.5 High severity
Easy Post Submission: Missing Authorization
CVE-2026-22479Mar 5, 2026ThemeRuby
7.5 High severity
Podlove Web Player: Deserialization of Untrusted Data
CVE-2026-24385Mar 5, 2026Gerritvanaaken
7.5 High severity
Cognix Platform: Improper Access Control
CVE-2026-26418Mar 5, 2026Tcs
7.5 High severity
Responsive Posts Carousel Pro: Missing Authorization
CVE-2026-27361Mar 5, 2026WebCodingPlace
7.5 High severity
Chaty: Insertion of Sensitive Information Into Sent Data
CVE-2026-27370Mar 5, 2026Premio
7.5 High severity
WooCommerce Order Details: Missing Authorization
CVE-2026-27374Mar 5, 2026Vanquish
7.5 High severity
DesignThemes Directory Addon: Missing Authorization
CVE-2026-27386Mar 5, 2026DesignThemes
7.5 High severity
DesignThemes Booking Manager: Missing Authorization
CVE-2026-27388Mar 5, 2026DesignThemes
7.5 High severity
My Tickets: Insertion of Sensitive Information Into Sent Data
CVE-2026-27406Mar 5, 2026Joe Dolson
7.5 High severity
wpDataTables: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-28039Mar 5, 2026TMS
7.5 High severity
Guff: Missing Authorization
CVE-2026-28076Mar 5, 2026Frenify
7.0 High severity
Avira Internet Security: Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-27750Mar 5, 2026Gen Digital
7.3 High severity
Directory Pro: Missing Authorization
CVE-2026-27396Mar 5, 2026E-plugins
7.2 High severity
Amelia: Incorrect Privilege Assignment
CVE-2026-24963Mar 5, 2026Ameliabooking
7.2 High severity
Wholesale Suite: Incorrect Privilege Assignment
CVE-2026-27541Mar 5, 2026Josh Kohlbach
7.1 High severity
TheBi: Improper Neutralization of Input During Web Page Generation
CVE-2026-22438Mar 5, 2026Foreverpinetree
7.1 High severity
Thecs: Improper Neutralization of Input During Web Page Generation
CVE-2026-22440Mar 5, 2026Foreverpinetree
7.1 High severity
Thebe: Improper Neutralization of Input During Web Page Generation
CVE-2026-22455Mar 5, 2026Foreverpinetree
7.1 High severity
BuddyApp: Improper Neutralization of Input During Web Page Generation
CVE-2026-22465Mar 5, 2026SeventhQueen
7.1 High severity
DeepDigital: Improper Neutralization of Input During Web Page Generation
CVE-2026-22467Mar 5, 2026Mwtemplates
7.1 High severity
Agrofood: Improper Neutralization of Input During Web Page Generation
CVE-2026-27332Mar 5, 2026Skygroup
7.1 High severity
Photography: Improper Neutralization of Input During Web Page Generation
CVE-2026-27348Mar 5, 2026ThemeGoods
7.1 High severity
Starto: Improper Neutralization of Input During Web Page Generation
CVE-2026-27352Mar 5, 2026ThemeGoods
7.1 High severity
Grand News: Improper Neutralization of Input During Web Page Generation
CVE-2026-27353Mar 5, 2026ThemeGoods
7.1 High severity
Architecturer: Improper Neutralization of Input During Web Page Generation
CVE-2026-27358Mar 5, 2026ThemeGoods
7.1 High severity
Awa Plugins: Improper Neutralization of Input During Web Page Generation
CVE-2026-27359Mar 5, 2026Fox-themes
7.1 High severity
WP Bakery Autoresponder Addon: Improper Neutralization of Input During Web Page Generation
CVE-2026-27363Mar 5, 2026Kamleshyadav
7.1 High severity
Musico: Improper Neutralization of Input During Web Page Generation
CVE-2026-27367Mar 5, 2026ThemeGoods
7.1 High severity
Gecko: Improper Neutralization of Input During Web Page Generation
CVE-2026-27375Mar 5, 2026JanStudio
7.1 High severity
Claue - Clean, Minimal Elementor WooCommerce…: Improper Neutralization of Input During Web Page Generation
CVE-2026-27376Mar 5, 2026JanStudio
7.1 High severity
Metro: Improper Neutralization of Input During Web Page Generation
CVE-2026-27382Mar 5, 2026RadiusTheme
7.1 High severity
DesignThemes Portfolio: Improper Neutralization of Input During Web Page Generation
CVE-2026-27385Mar 5, 2026DesignThemes
7.1 High severity
EventON: Improper Neutralization of Input During Web Page Generation
CVE-2026-28037Mar 5, 2026Ashanjay
7.1 High severity
Listify: Improper Neutralization of Input During Web Page Generation
CVE-2026-28042Mar 5, 2026Astoundify
7.1 High severity
pixfort Core: Improper Neutralization of Input During Web Page Generation
CVE-2026-28072Mar 5, 2026PixFort
7.1 High severity
Porto: Improper Neutralization of Input During Web Page Generation
CVE-2026-28075Mar 5, 2026P-themes
7.1 High severity
UberSlider Ultra: Improper Neutralization of Input During Web Page Generation
CVE-2026-28099Mar 5, 2026LambertGroup
7.1 High severity
UberSlider PerpetuumMobile: Improper Neutralization of Input During Web Page Generation
CVE-2026-28100Mar 5, 2026LambertGroup
7.1 High severity
UberSlider MouseInteraction: Improper Neutralization of Input During Web Page Generation
CVE-2026-28101Mar 5, 2026LambertGroup
7.1 High severity
UberSlider Classic: Improper Neutralization of Input During Web Page Generation
CVE-2026-28102Mar 5, 2026LambertGroup
7.1 High severity
LBG Zoominoutslider: Improper Neutralization of Input During Web Page Generation
CVE-2026-28103Mar 5, 2026LambertGroup
7.1 High severity
LambertGroup - AllInOne - Content Slider: Improper Neutralization of Input During Web Page Generation
CVE-2026-28109Mar 5, 2026LambertGroup
7.1 High severity
AllInOne - Banner Rotator: Improper Neutralization of Input During Web Page Generation
CVE-2026-28112Mar 5, 2026LambertGroup
7.1 High severity
Ultimate Learning Pro: Improper Neutralization of Input During Web Page Generation
CVE-2026-28113Mar 5, 2026Azzaroco
7.1 High severity
ListingPro: Improper Neutralization of Input During Web Page Generation
CVE-2026-28122Mar 5, 2026CridioStudio
7.1 High severity
RH Frontend Publishing Pro: Improper Neutralization of Input During Web Page Generation
CVE-2026-28126Mar 5, 2026Sizam
7.1 High severity
Lawyer Directory: Improper Neutralization of Input During Web Page Generation
CVE-2026-28127Mar 5, 2026E-plugins
7.1 High severity
UDesign: Improper Neutralization of Input During Web Page Generation
CVE-2026-28130Mar 5, 2026AndonDesign
7.1 High severity
MediCenter - Health Medical Clinic: Improper Neutralization of Input During Web Page Generation
CVE-2026-28137Mar 5, 2026QuanticaLabs