cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 9

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 2.1CVE-2026-108568EPSS 0.1%

    A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal.php of the component Billing Module. Executing a manipulation …

  2. 7.3CVE-2026-108693EPSS 0.2%

    ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin6…

  3. 9.8CVE-2026-81797EPSS 0.3%

    Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.

  4. 9.8CVE-2026-78535EPSS 0.3%

    Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.

  5. 9.8CVE-2026-78533EPSS 0.3%

    Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

  6. 9.8CVE-2026-78531EPSS 0.3%

    Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.

  7. 9.8CVE-2026-78529EPSS 0.3%

    Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.

  8. 9.8CVE-2026-66569EPSS 0.3%

    Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.

  9. 9.8CVE-2026-66568EPSS 0.3%

    Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.

  10. 9.8CVE-2026-66567EPSS 0.3%

    Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.

  11. 9.8CVE-2026-66565EPSS 0.3%

    Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.

  12. 9.8CVE-2026-66564EPSS 0.3%

    Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.

  13. 9.8CVE-2026-66563EPSS 0.3%

    Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

  14. 9.8CVE-2026-66483EPSS 0.3%

    Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

  15. 9.8CVE-2026-66482EPSS 0.3%

    Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions.

  16. 7.2CVE-2026-62130EPSS 0.3%

    Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions.

  17. 9.8CVE-2026-62125EPSS 0.3%

    Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions.

  18. 9.8CVE-2026-62124EPSS 0.3%

    Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions.

  19. 9.8CVE-2026-62123EPSS 0.3%

    Unauthenticated PHP Object Injection in Invetex <= 2.18 versions.

  20. 9.8CVE-2026-62120EPSS 0.3%

    Unauthenticated PHP Object Injection in Law Office <= 3.20 versions.

  21. 9.8CVE-2026-62090EPSS 0.4%

    Unauthenticated PHP Object Injection in WineShop <= 3.20 versions.

  22. 9.8CVE-2026-62087EPSS 0.4%

    Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions.

  23. 9.8CVE-2026-62086EPSS 0.4%

    Unauthenticated PHP Object Injection in Juno <= 2.25 versions.

  24. 9.8CVE-2026-62077EPSS 0.4%

    Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions.

  25. 9.8CVE-2026-62076EPSS 0.4%

    Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions.

  26. 9.8CVE-2026-62054EPSS 0.4%

    Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions.

  27. 9.8CVE-2026-62053EPSS 0.4%

    Unauthenticated PHP Object Injection in Wine House <= 3.20 versions.

  28. 9.8CVE-2026-62052EPSS 0.4%

    Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions.

  29. 9.8CVE-2026-62051EPSS 0.4%

    Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions.

  30. 9.8CVE-2026-62050EPSS 0.4%

    Unauthenticated PHP Object Injection in Splendour <= 1.23 versions.

  31. 8.8CVE-2026-62021EPSS 0.5%

    Subscriber PHP Object Injection in Angio <= 1.1.1 versions.

  32. 9.8CVE-2026-42723EPSS 0.4%

    Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions.

  33. 9.8CVE-2026-42719EPSS 0.5%

    Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.

  34. 9.8CVE-2026-42718EPSS 0.4%

    Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions.

  35. 9.8CVE-2026-42716EPSS 0.4%

    Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions.

  36. 5.3CVE-2026-107420EPSS 0.1%

    Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 versions.

  37. 7.2CVE-2026-62044EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1.8.13.

  38. 9.8CVE-2026-104398EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects AFFI – Affiliate Marketing for WooCommerce: from n/a throu…

  39. 7.2CVE-2026-94676EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0.

  40. 8.8CVE-2026-105885EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62.

  41. 9.8CVE-2026-93945EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.

  42. 9.8CVE-2026-93944EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15.

  43. 9.8CVE-2026-93943EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0.

  44. 9.8CVE-2026-93942EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0.

  45. 9.8CVE-2026-93941EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2.

  46. 9.8CVE-2026-93940EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.

  47. 9.8CVE-2026-93938EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.

  48. 9.8CVE-2026-93937EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0.

  49. 9.8CVE-2026-93936EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.

  50. 9.8CVE-2026-93935EPSS 0.3%

    Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15.