Total
408097 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-66470 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions. | |||||
| CVE-2026-28139 | 2026-08-12 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions. | |||||
| CVE-2026-65509 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions. | |||||
| CVE-2026-66425 | 2026-08-12 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions. | |||||
| CVE-2026-66699 | 2026-08-12 | N/A | 5.3 MEDIUM | ||
| Custom role Broken Access Control in Dokan <= 5.0.10 versions. | |||||
| CVE-2026-28178 | 2026-08-12 | N/A | 6.5 MEDIUM | ||
| Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions. | |||||
| CVE-2026-65573 | 2026-08-12 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. | |||||
| CVE-2026-65560 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. | |||||
| CVE-2026-66702 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions. | |||||
| CVE-2026-65543 | 2026-08-12 | N/A | 7.5 HIGH | ||
| Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions. | |||||
| CVE-2026-28177 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions. | |||||
| CVE-2026-66695 | 2026-08-12 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions. | |||||
| CVE-2026-66664 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions. | |||||
| CVE-2026-65545 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions. | |||||
| CVE-2026-65577 | 2026-08-12 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. | |||||
| CVE-2026-66707 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions. | |||||
| CVE-2026-66439 | 2026-08-12 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. | |||||
| CVE-2026-66692 | 2026-08-12 | N/A | 4.3 MEDIUM | ||
| Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions. | |||||
| CVE-2026-28140 | 2026-08-12 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions. | |||||
| CVE-2026-28147 | 2026-08-12 | N/A | 5.4 MEDIUM | ||
| Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Unlimited Elements For Elementor (Free Widgets, Addons, Templates): from n/a through 2.0.15. | |||||