7.4
CVSS
CVE-2026-5127
HIGH
Deserialization
⚠ Unpatched◉ PoC Public
wedevs User Frontend Plugin up to 4.3.1 on WordPress maybe_unserialize wpuf_files deserialization
root@hackertop:~/vulnfeed#
Vuln Alert Channel
Real-time vulnerability tracking · VulDB sync · full vulnerability lifecycle analysis
0
Critical Vulns
20
High Vulns
132
Unpatched
Found 132 vulnerabilities
7.3
CVSS
CVE-2026-65879
HIGH
CVE
⚠ Unpatched◉ PoC Public
Joomshaper SP Page Builder Extension up to 6.7.0 hard-coded credentials
7.3
CVSS
CVE-2026-65876
HIGH
SQLi/Injection
⚠ Unpatched◉ PoC Public
Joomshaper SP Page Builder Extension up to 6.7.0 LoadMoreArticles Endpoint catid sql injection
7.3
CVSS
CVE-2026-3430
HIGH
SQLi/Injection
⚠ Unpatched◉ PoC Public
Creative Mail Plugin up to 1.6.9 on WordPress sql injection
7.3
CVSS
CVE-2026-65766
HIGH
SQLi/Injection
⚠ Unpatched◉ PoC Public
Joomshaper SP Page Builder Extension up to 6.7.0 Dynamic Content Endpoint order sql injection
