{"items":[{"id":"CVE-2026-115806","published":"2026-10-24T04:32:10.565Z","updated":"2026-10-29T01:52:01.233Z","title":"Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection via Base64-Encoded Comment during Migration Search-and-Replace","severity":"CRITICAL","score":9.8,"vendor":"codexonics","product":"Prime Mover – Backup and Migration","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2026-101890","published":"2026-10-01T16:22:08.087Z","updated":"2026-10-01T21:44:58.019Z","title":"Prime Mover < 2.2.1 Stored XSS via Package Metadata","severity":"MEDIUM","score":5.1,"vendor":"Codexonics","product":"Prime Mover","kev":false,"epss":0.00163,"kevAdded":null},{"id":"CVE-2026-101889","published":"2026-10-01T16:20:54.762Z","updated":"2026-10-01T21:44:57.359Z","title":"Prime Mover < 2.2.1 Path Traversal via wprime-config.json","severity":"HIGH","score":7,"vendor":"Codexonics","product":"Prime Mover","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-101888","published":"2026-10-01T16:19:51.191Z","updated":"2026-10-01T21:44:56.704Z","title":"Prime Mover < 2.2.1 Zip Slip Path Traversal File Write","severity":"HIGH","score":8.6,"vendor":"Codexonics","product":"Prime Mover","kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2022-4974","published":"2024-10-16T06:43:30.014Z","updated":"2026-04-08T16:46:54.861Z","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks","severity":"MEDIUM","score":6.3,"vendor":"dashlabsltd","product":"YASR – Yet Another Star Rating Plugin for WordPress","kev":false,"epss":0.00442,"kevAdded":null}]}