CVEs we hold for Edge
Records whose assigning authority named Edge as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-9756GenerateBlocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Headline Block…edge22 GenerateBlocks
CVE-2026-66653WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerabilityEdge-Themes Barista
CVE-2026-66627WordPress GP Premium plugin <= 2.5.5 - Arbitrary File Upload vulnerabilityEDGE22 Studios Ltd. GP Premium
CVE-2026-57800WordPress Overworld theme <= 1.5 - Local File Inclusion vulnerabilityEdge-Themes Overworld
CVE-2026-40761WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerabilityEdge-Themes Valeska
CVE-2026-40736WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerabilityEdge-Themes Laurits
CVE-2026-39539WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerabilityEdge-Themes Alloggio - Hotel Booking
CVE-2026-3454GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information…edge22 GenerateBlocks
CVE-2026-32512WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerabilityEdge-Themes Pelicula
CVE-2026-32510WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerabilityEdge-Themes Kamperen
CVE-2026-32509WordPress Gracey theme < 1.4 - Arbitrary Object Instantiation vulnerabilityEdge-Themes Gracey
CVE-2026-32506WordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerabilityEdge-Themes Archicon
CVE-2026-1680Local Privilege Escalation in Local Admin ServiceEdgemo (Danoffice IT) Local Admin Service
CVE-2026-13458GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML…edge22 GenerateBlocks
CVE-2026-0685Server side template inject (SSTI) in Edgewall Genshi Template EngineEdgewall *Genshi* Genshi
CVE-2025-69410WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerabilityEdge-Themes Belletrist
CVE-2025-69050WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerabilityEdge-Themes Overworld
CVE-2025-68987WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerabilityEdge-Themes Cinerama
CVE-2025-64287WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerabilityEdge-Themes Alloggio - Hotel Booking
CVE-2025-62868WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerabilityEdge-Themes Edge CPT
CVE-2025-58356Constellation allows insecure use of LUKS2 persistent storage partitionsedgelesssys constellation
CVE-2025-49889WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerabilityEdge-Themes Edge CPT
CVE-2025-3278UrbanGo Membership <= 1.0.4 - Unauthenticated Privilege EscalationEdge-Themes UrbanGo Membership
CVE-2025-1638Alloggio Membership <= 1.1 - Authentication Bypass via Social Login Account TakeoverEdge-Themes Alloggio Membership
CVE-2025-15637WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerabilityEdge Themes Shuffle
CVE-2025-12512GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadataedge22 GenerateBlocks
CVE-2025-11879GenerateBlocks <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosureedge22 GenerateBlocks
CVE-2024-13546GenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description'edge22 GenerateBlocks
CVE-2023-6731WP Show Posts <= 1.1.5 - Improper Authorization to Information Exposureedge22 WP Show Posts
CVE-2022-31066Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated usersedgexfoundry edgex-go
CVE-2021-41278Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to…edgexfoundry app-functions-sdk-go
CVE-2021-32753Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to…edgexfoundry edgex-go
81 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.