Total
408097 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-65578 | 2026-08-12 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Agora <= 1.9 versions. | |||||
| CVE-2026-28180 | 2026-08-12 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions. | |||||
| CVE-2026-28141 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions. | |||||
| CVE-2026-28143 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions. | |||||
| CVE-2026-65570 | 2026-08-12 | N/A | 8.1 HIGH | ||
| Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions. | |||||
| CVE-2026-65507 | 2026-08-12 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions. | |||||
| CVE-2026-25403 | 2026-08-12 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions. | |||||
| CVE-2026-66711 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions. | |||||
| CVE-2026-28111 | 2026-08-12 | N/A | 8.8 HIGH | ||
| Contributor Privilege Escalation in Forminator <= 1.56.0 versions. | |||||
| CVE-2026-32548 | 2026-08-12 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions. | |||||
| CVE-2026-65523 | 2026-08-12 | N/A | 7.5 HIGH | ||
| Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions. | |||||
| CVE-2026-28179 | 2026-08-12 | N/A | 5.9 MEDIUM | ||
| Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions. | |||||
| CVE-2026-28082 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions. | |||||
| CVE-2026-66683 | 2026-08-12 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions. | |||||
| CVE-2026-66684 | 2026-08-12 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions. | |||||
| CVE-2026-66703 | 2026-08-12 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. | |||||
| CVE-2026-28005 | 2026-08-12 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions. | |||||
| CVE-2026-61982 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions. | |||||
| CVE-2026-28146 | 2026-08-12 | N/A | 6.5 MEDIUM | ||
| Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions. | |||||
| CVE-2026-66706 | 2026-08-12 | N/A | 5.9 MEDIUM | ||
| Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions. | |||||