Log in Start free

SpabRice

Products

ProductCVEsExploitedLatest
Mogi1–Apr 8, 2026
Nyla1–May 26, 2026
Pond1–Oct 9, 2026
Vavo Core1–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-94066 High 7.1 WordPress Pond theme <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-28570 High 8.1 WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-39642 Medium 5.3 WordPress Nyla theme <= 1.7 - Arbitrary Shortcode Execution vulnerability 0.3%
  • CVE-2026-39637 Medium 5.3 WordPress Mogi theme <= 1.2.3 - Arbitrary Shortcode Execution vulnerability 0.2%