Total
398697 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-66460 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions. | |||||
| CVE-2026-66426 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions. | |||||
| CVE-2026-61980 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions. | |||||
| CVE-2026-65582 | 2026-08-14 | N/A | 7.7 HIGH | ||
| Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions. | |||||
| CVE-2026-61974 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions. | |||||
| CVE-2026-66456 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions. | |||||
| CVE-2026-28168 | 2026-08-14 | N/A | 8.5 HIGH | ||
| Subscriber SQL Injection in CubeWP <= 1.1.30 versions. | |||||
| CVE-2026-66424 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions. | |||||
| CVE-2026-66458 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Unauthenticated SQL Injection in RealPress <= 1.1.2 versions. | |||||
| CVE-2026-28175 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions. | |||||
| CVE-2026-28186 | 2026-08-14 | N/A | 8.1 HIGH | ||
| Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions. | |||||
| CVE-2026-28003 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions. | |||||
| CVE-2026-66450 | 2026-08-14 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions. | |||||
| CVE-2026-61967 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions. | |||||
| CVE-2026-28173 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions. | |||||
| CVE-2026-28158 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions. | |||||
| CVE-2026-27543 | 2026-08-14 | N/A | 8.1 HIGH | ||
| Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions. | |||||
| CVE-2026-28008 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions. | |||||
| CVE-2026-61962 | 2026-08-14 | N/A | 10.0 CRITICAL | ||
| Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions. | |||||
| CVE-2026-28176 | 2026-08-14 | N/A | 8.8 HIGH | ||
| Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions. | |||||