Skip to content
PPX-lab
Exploited and recent CVEs
-
CVE-2026-94503
Critical 10.0
WordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerability
0.4%
-
CVE-2025-8385
Medium 6.8
Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read
0.4%
-
CVE-2024-12295
High 8.8
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password
0.4%
-
CVE-2024-12859
High 8.8
BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
0.6%