Real-Time Zero-Day Stream • Direct NIST NVD Disclosures (2025-2026)

Fresh 2026 Zero-Days & Newly Disclosed CVEs

Continuous surveillance of newly registered CVE advisories with CVSS threat scores, attack vector metrics, and impacted software libraries.

Reset All
Found 11,981 fresh security advisories
Page 298 of 500
CVE-2026-27983 CRITICAL 9.8
CWE-266 Remote (AV:N)

Incorrect Privilege Assignment vulnerability in designthemes LMS Elementor Pro lms-elementor-pro allows Privilege Escalation.This issue affects LMS Elementor Pro: from n/a through <= 1.0.4....

📅 2026-03-05 Inspect Dossier →
CVE-2026-27439 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Dentario dentario allows Object Injection.This issue affects Dentario: from n/a through <= 1.5....

📅 2026-03-05 Inspect Dossier →
CVE-2026-27438 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Kingler kingler allows Object Injection.This issue affects Kingler: from n/a through <= 1.7....

📅 2026-03-05 Inspect Dossier →
CVE-2026-27437 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3....

📅 2026-03-05 Inspect Dossier →
CVE-2026-27417 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through < 4.0.1....

📅 2026-03-05 Inspect Dossier →
CVE-2026-27389 CRITICAL 9.8
CWE-288 Remote (AV:N)

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue af...

📅 2026-03-05 Inspect Dossier →
CVE-2026-27384 CRITICAL 9.0
CWE-1284 Remote (AV:N)

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total C...

📅 2026-03-05 Inspect Dossier →
CVE-2026-24960 CRITICAL 9.9
CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2....

📅 2026-03-05 Inspect Dossier →
CVE-2026-23802 CRITICAL 9.1
CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a through <= 3.3.2....

📅 2026-03-05 Inspect Dossier →
CVE-2026-23767 CRITICAL 9.8
epson/sb-h50_firmware CWE-306 Remote (AV:N)

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinatio...

📅 2026-03-05 Inspect Dossier →
CVE-2026-22501 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22497 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in AncoraThemes Jardi jardi allows Object Injection.This issue affects Jardi: from n/a through <= 1.7.2....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22475 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22474 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Equestrian Centre equestrian-centre allows Object Injection.This issue affects Equestrian Centre: from n/a through <= 1.5....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22454 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Solaris solaris allows Object Injection.This issue affects Solaris: from n/a through <= 2.5....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22453 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Pets Club petclub allows Object Injection.This issue affects Pets Club: from n/a through <= 2.3....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22451 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in AncoraThemes Handyman handyman-services allows Object Injection.This issue affects Handyman: from n/a through <= 1.4.7....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22417 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11....

📅 2026-03-05 Inspect Dossier →
CVE-2026-22390 CRITICAL 9.9
CWE-94 Remote (AV:N)

Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Bui...

📅 2026-03-05 Inspect Dossier →
CVE-2025-69338 CRITICAL 9.3
CWE-89 Remote (AV:N)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Riode Core riode-core allows Blind SQL Injection.This issue affects Riode Core: from n/...

📅 2026-03-05 Inspect Dossier →
CVE-2025-68555 CRITICAL 9.9
CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.0.1....

📅 2026-03-05 Inspect Dossier →
CVE-2025-68554 CRITICAL 9.9
CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through < 2.0.1....

📅 2026-03-05 Inspect Dossier →
CVE-2025-68553 CRITICAL 9.9
CWE-434 Remote (AV:N)

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Lendiz lendiz allows Upload a Web Shell to a Web Server.This issue affects Lendiz: from n/a through < 2.0.1....

📅 2026-03-05 Inspect Dossier →
CVE-2025-54001 CRITICAL 9.8
CWE-502 Remote (AV:N)

Deserialization of Untrusted Data vulnerability in ThemeREX Classter classter allows Object Injection.This issue affects Classter: from n/a through <= 2.5....

📅 2026-03-05 Inspect Dossier →
Showing Page 298 of 500 • 11,981 newly disclosed advisories