7.4
CVSS
CVE-2026-5127
HIGH
Deserialization
⚠ Unpatched◉ PoC Public
wedevs User Frontend Plugin up to 4.3.1 on WordPress maybe_unserialize wpuf_files deserialization
root@hackertop:~/vulnfeed#
Vuln Alert Channel
Real-time vulnerability tracking · VulDB sync · full vulnerability lifecycle analysis
0
Critical Vulns
21
High Vulns
137
Unpatched
Found 146 vulnerabilities
7.4
CVSS
CVE-2026-41139
HIGH
CVE
⚠ Unpatched◉ PoC Public
josdejong mathjs up to 15.1.x dynamically-determined object attributes
7.3
CVSS
CVE-2026-65766
HIGH
SQLi/Injection
⚠ Unpatched◉ PoC Public
Joomshaper SP Page Builder Extension up to 6.7.0 Dynamic Content Endpoint order sql injection
7.3
CVSS
CVE-2026-65879
HIGH
CVE
⚠ Unpatched◉ PoC Public
Joomshaper SP Page Builder Extension up to 6.7.0 hard-coded credentials
7.3
CVSS
CVE-2026-65876
HIGH
SQLi/Injection
⚠ Unpatched◉ PoC Public
Joomshaper SP Page Builder Extension up to 6.7.0 LoadMoreArticles Endpoint catid sql injection
