Total
408320 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-66468 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions. | |||||
| CVE-2026-28157 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Subscriber Path Traversal in Do Lasso <= 358 versions. | |||||
| CVE-2026-28161 | 2026-08-14 | N/A | 8.8 HIGH | ||
| Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions. | |||||
| CVE-2026-66454 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions. | |||||
| CVE-2026-66431 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions. | |||||
| CVE-2026-28185 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions. | |||||
| CVE-2026-28142 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions. | |||||
| CVE-2026-28181 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |||||
| CVE-2026-66455 | 2026-08-14 | N/A | 6.0 MEDIUM | ||
| Subscriber Broken Access Control in ReactPress <= 3.4.0 versions. | |||||
| CVE-2026-28148 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions. | |||||
| CVE-2026-66436 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions. | |||||
| CVE-2026-28001 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions. | |||||
| CVE-2026-27345 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions. | |||||
| CVE-2026-28155 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions. | |||||
| CVE-2026-28156 | 2026-08-14 | N/A | 8.5 HIGH | ||
| Subscriber SQL Injection in Do Lasso <= 358 versions. | |||||
| CVE-2026-61978 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions. | |||||
| CVE-2026-28154 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snstheme M.Anh - Fashion WooCoommerce WordPress Theme allows Reflected XSS. This issue affects Samex - Clean, Minimal Shop WooCommerce WordPress Theme: from n/a through 2.5; M.Anh - Fashion WooCoommerce WordPress Theme: from n/a through 1.7. | |||||
| CVE-2026-66429 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions. | |||||
| CVE-2026-27539 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions. | |||||
| CVE-2026-66441 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions. | |||||