Total
408310 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-27999 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in Tourfic <= 2.23.1 versions. | |||||
| CVE-2026-66432 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions. | |||||
| CVE-2026-28174 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. | |||||
| CVE-2026-66459 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions. | |||||
| CVE-2026-28002 | 2026-08-14 | N/A | 8.5 HIGH | ||
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22. | |||||
| CVE-2026-66453 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions. | |||||
| CVE-2026-66430 | 2026-08-14 | N/A | 8.5 HIGH | ||
| Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. | |||||
| CVE-2026-28170 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions. | |||||
| CVE-2026-28149 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions. | |||||
| CVE-2026-65580 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions. | |||||
| CVE-2026-66446 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions. | |||||
| CVE-2026-28182 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |||||
| CVE-2026-66463 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions. | |||||
| CVE-2026-61969 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Unauthenticated SQL Injection in Listdom <= 5.6.0 versions. | |||||
| CVE-2026-66444 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions. | |||||
| CVE-2026-61979 | 2026-08-14 | N/A | 8.1 HIGH | ||
| Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions. | |||||
| CVE-2026-66443 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions. | |||||
| CVE-2026-27535 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions. | |||||
| CVE-2026-27538 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions. | |||||
| CVE-2026-28188 | 2026-08-14 | N/A | 7.3 HIGH | ||
| Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions. | |||||