Total
408279 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-61978 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions. | |||||
| CVE-2026-28154 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snstheme M.Anh - Fashion WooCoommerce WordPress Theme allows Reflected XSS. This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through 2.5; M.Anh - Fashion WooCoommerce WordPress Theme: from n/a through 1.7. | |||||
| CVE-2026-66429 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. | |||||
| CVE-2026-27539 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions. | |||||
| CVE-2026-66441 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions. | |||||
| CVE-2026-66462 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions. | |||||
| CVE-2026-61966 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions. | |||||
| CVE-2026-28159 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions. | |||||
| CVE-2026-28004 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions. | |||||
| CVE-2026-27999 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in Tourfic <= 2.23.1 versions. | |||||
| CVE-2026-66432 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions. | |||||
| CVE-2026-28174 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. | |||||
| CVE-2026-66459 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions. | |||||
| CVE-2026-28002 | 2026-08-14 | N/A | 8.5 HIGH | ||
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22. | |||||
| CVE-2026-66453 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions. | |||||
| CVE-2026-66430 | 2026-08-14 | N/A | 8.5 HIGH | ||
| Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. | |||||
| CVE-2026-28170 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions. | |||||
| CVE-2026-28149 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions. | |||||
| CVE-2026-65580 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions. | |||||
| CVE-2026-66446 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions. | |||||