Threats affecting pkg:bitnami/powershell

182,804 threats

Severity	CVSS	Threat	Source	Published
Medium	6.5	CVE-2026-118084Hotel Booking (WordPress plugin) · Insecure Direct Object Reference Medium6.52026-10-29CVE Database V5CVE-2026-118084 Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions. Vulnerability nicdark CWE-639	CVE Database V5	2026-10-29
High	7.5	CVE-2026-118083Themeum WP Crowdfunding · Insertion of Sensitive Information Into Sent Data High7.52026-10-29CVE Database V5CVE-2026-118083 Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions. Vulnerability CWE-201	CVE Database V5	2026-10-29
High	8.8	CVE-2026-118082Buddyboss Platform (WordPress plugin) · Incorrect Privilege Assignment High8.82026-10-29CVE Database V5CVE-2026-118082 Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. Vulnerability CWE-266	CVE Database V5	2026-10-29
High	8.8	CVE-2026-11808110Web Social Photo Feed (WordPress plugin) · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-118081 Contributor PHP Object Injection in 10Web Social Photo Feed <= 1.5.6 versions. Vulnerability CWE-502	CVE Database V5	2026-10-29
High	8.8	CVE-2026-118080Social Snap (WordPress plugin) · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-118080 Contributor PHP Object Injection in Social Snap <= 1.5.4 versions. Vulnerability CWE-502	CVE Database V5	2026-10-29
High	7.2	CVE-2026-118079FV Flowplayer Video Player (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-118079 Shop manager PHP Object Injection in FV Flowplayer Video Player <= 8.3.4 versions. Vulnerability FolioVision CWE-502	CVE Database V5	2026-10-29
High	7.2	CVE-2026-118078Product Catalog Feed by PixelYourSite (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-118078 Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions. Vulnerability CWE-502	CVE Database V5	2026-10-29
High	7.2	CVE-2026-118077Sastra Essential Addons for Elementor (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-118077 Author PHP Object Injection in Sastra Essential Addons for Elementor <= 1.2.3 versions. Vulnerability Fast Themes CWE-502	CVE Database V5	2026-10-29
High	8.8	CVE-2026-118076Frisbii Pay (WordPress plugin) · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-118076 Contributor PHP Object Injection in Frisbii Pay <= 1.8.19 versions. Vulnerability CWE-502	CVE Database V5	2026-10-29
High	8.8	CVE-2026-118075WP Media folders · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-118075 Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. Vulnerability dbarrere CWE-502	CVE Database V5	2026-10-29
High	7.2	CVE-2026-118074Finale Lite (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-118074 Shop manager PHP Object Injection in Finale Lite <= 2.21.0 versions. Vulnerability Daman Jeet CWE-502	CVE Database V5	2026-10-29
High	8.8	CVE-2026-118073News Kit Elementor Addons (WordPress plugin) · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-118073 Subscriber PHP Object Injection in News Kit Elementor Addons <= 1.5.0 versions. Vulnerability blazethemes CWE-502	CVE Database V5	2026-10-29
High	7.2	CVE-2026-116869myPOS Checkout (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-116869 Shop manager PHP Object Injection in myPOS Checkout <= 1.4.5 versions. Vulnerability myPOS Payments CWE-502	CVE Database V5	2026-10-29
High	8.8	CVE-2026-116868BuddyPress Xprofile Custom Field Types (WordPress plugin) · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-116868 Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions. Vulnerability BuddyDev CWE-502	CVE Database V5	2026-10-29
High	8.8	CVE-2026-116867Dynamic QR Code – generator (WordPress plugin) · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-116867 Contributor PHP Object Injection in Dynamic QR Code – generator <= 1.0.1 versions. Vulnerability sosidee CWE-502	CVE Database V5	2026-10-29
High	8.8	CVE-2026-116866Dotstore Extra Fees Plugin for WooCommerce · Deserialization of Untrusted Data High8.82026-10-29CVE Database V5CVE-2026-116866 Contributor PHP Object Injection in Extra Fees Plugin for WooCommerce <= 4.4.0 versions. Vulnerability CWE-502	CVE Database V5	2026-10-29
High	7.2	CVE-2026-116865Zippy (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-116865 Editor PHP Object Injection in Zippy <= 1.7.0 versions. Vulnerability Gesundheit Bewegt CWE-502	CVE Database V5	2026-10-29
High	7.2	CVE-2026-116864WPCargo Track & Trace (WordPress plugin) · Deserialization of Untrusted Data High7.22026-10-29CVE Database V5CVE-2026-116864 Author PHP Object Injection in WPCargo Track & Trace <= 8.0.5 versions. Vulnerability Arni Cinco CWE-502	CVE Database V5	2026-10-29
High	7.1	CVE-2026-108494Chained Quiz (WordPress plugin) · Cross-site Scripting High7.12026-10-29CVE Database V5CVE-2026-108494 Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions. Vulnerability Bob CWE-79	CVE Database V5	2026-10-29
Critical	9.8	CVE-2026-62131Zoho Flow (WordPress plugin) · Deserialization of Untrusted Data Critical9.82026-10-29CVE Database V5CVE-2026-62131 CVE-2026-62131 is a critical vulnerability in Zoho Flow versions up to 2.14.5 involving unauthenticated PHP object injection due to deserialization of untrusted data. This flaw allows remote attackers to execute arbitrary code without authentication. Vulnerability CWE-502	CVE Database V5	2026-10-29

Page 1 of 9,141