Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66612 2 Thembay, Wordpress 2 Aora, Wordpress 2026-08-20 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.
CVE-2026-27381 2 Thembay, Wordpress 2 Aora, Wordpress 2026-04-22 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.