Total
408356 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-66456 | 2026-08-14 | N/A | 6.5 MEDIUM | ||
| Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions. | |||||
| CVE-2026-28168 | 2026-08-14 | N/A | 8.5 HIGH | ||
| Subscriber SQL Injection in CubeWP <= 1.1.30 versions. | |||||
| CVE-2026-66424 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions. | |||||
| CVE-2026-66458 | 2026-08-14 | N/A | 9.3 CRITICAL | ||
| Unauthenticated SQL Injection in RealPress <= 1.1.2 versions. | |||||
| CVE-2026-28175 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions. | |||||
| CVE-2026-28186 | 2026-08-14 | N/A | 8.1 HIGH | ||
| Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions. | |||||
| CVE-2026-28003 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions. | |||||
| CVE-2026-66450 | 2026-08-14 | N/A | 8.1 HIGH | ||
| Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions. | |||||
| CVE-2026-61967 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions. | |||||
| CVE-2026-28173 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions. | |||||
| CVE-2026-28158 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions. | |||||
| CVE-2026-27543 | 2026-08-14 | N/A | 8.1 HIGH | ||
| Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions. | |||||
| CVE-2026-28008 | 2026-08-14 | N/A | 9.8 CRITICAL | ||
| Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions. | |||||
| CVE-2026-61962 | 2026-08-14 | N/A | 10.0 CRITICAL | ||
| Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions. | |||||
| CVE-2026-28176 | 2026-08-14 | N/A | 8.8 HIGH | ||
| Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions. | |||||
| CVE-2026-28187 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions. | |||||
| CVE-2026-61984 | 2026-08-14 | N/A | 7.5 HIGH | ||
| Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions. | |||||
| CVE-2026-61960 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions. | |||||
| CVE-2026-27380 | 2026-08-14 | N/A | 7.2 HIGH | ||
| Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions. | |||||
| CVE-2026-61965 | 2026-08-14 | N/A | 7.1 HIGH | ||
| Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions. | |||||