| high |
CVE-2026-73382 — Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.2.0 versions. |
vulnerability |
nvd |
CVE-2026-73382 |
|
2026-08-18 |
| critical |
CVE-2026-73381 — Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions. |
vulnerability |
nvd |
CVE-2026-73381 |
|
2026-08-18 |
| critical |
CVE-2026-73380 — Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions. |
vulnerability |
nvd |
CVE-2026-73380 |
|
2026-08-18 |
| medium |
CVE-2026-73379 — Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions. |
vulnerability |
nvd |
CVE-2026-73379 |
|
2026-08-18 |
| high |
CVE-2026-73378 — Unauthenticated Cross Site Scripting (XSS) in Contact Form by Supsystic < 1.10.0 versions. |
vulnerability |
nvd |
CVE-2026-73378 |
|
2026-08-18 |
| high |
CVE-2026-73377 — Unauthenticated Broken Access Control in Ultimate Maps by Supsystic < 1.5.0 versions. |
vulnerability |
nvd |
CVE-2026-73377 |
|
2026-08-18 |
| critical |
CVE-2026-73376 — Unauthenticated PHP Object Injection in Ultimate Maps by Supsystic < 1.5.0 versions. |
vulnerability |
nvd |
CVE-2026-73376 |
|
2026-08-18 |
| high |
CVE-2026-73375 — Unauthenticated Cross Site Scripting (XSS) in Ultimate Maps by Supsystic < 1.5.0 versions. |
vulnerability |
nvd |
CVE-2026-73375 |
|
2026-08-18 |
| high |
CVE-2026-73367 — Unauthenticated Remote File Inclusion in Easy Google Maps < 1.14.2 versions. |
vulnerability |
nvd |
CVE-2026-73367 |
|
2026-08-18 |
| critical |
CVE-2026-73366 — Unauthenticated PHP Object Injection in Easy Google Maps <= 1.13.0 versions. |
vulnerability |
nvd |
CVE-2026-73366 |
|
2026-08-18 |
| critical |
CVE-2026-73365 — Unauthenticated SQL Injection in JetAppointment <= 2.5.2 versions. |
vulnerability |
nvd |
CVE-2026-73365 |
|
2026-08-18 |
| high |
CVE-2026-73362 — Unauthenticated Cross Site Scripting (XSS) in URL Shortify <= 2.5.0 versions. |
vulnerability |
nvd |
CVE-2026-73362 |
|
2026-08-18 |
| high |
CVE-2026-73361 — Unauthenticated Cross Site Scripting (XSS) in Recipe Card Blocks for Gutenberg & Elementor <= 3.4.18… |
vulnerability |
nvd |
CVE-2026-73361 |
|
2026-08-18 |
| high |
CVE-2026-73360 — Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions. |
vulnerability |
nvd |
CVE-2026-73360 |
|
2026-08-18 |
| medium |
CVE-2026-73359 — Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9… |
vulnerability |
nvd |
CVE-2026-73359 |
|
2026-08-18 |
| high |
CVE-2026-73358 — Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions. |
vulnerability |
nvd |
CVE-2026-73358 |
|
2026-08-18 |
| high |
CVE-2026-73356 — Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions. |
vulnerability |
nvd |
CVE-2026-73356 |
|
2026-08-18 |
| critical |
CVE-2026-73355 — Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions. |
vulnerability |
nvd |
CVE-2026-73355 |
|
2026-08-18 |
| medium |
CVE-2026-73352 — Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions. |
vulnerability |
nvd |
CVE-2026-73352 |
|
2026-08-18 |
| high |
CVE-2026-73351 — Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions. |
vulnerability |
nvd |
CVE-2026-73351 |
|
2026-08-18 |
| high |
CVE-2026-73350 — Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions. |
vulnerability |
nvd |
CVE-2026-73350 |
|
2026-08-18 |
| medium |
CVE-2026-73348 — Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions. |
vulnerability |
nvd |
CVE-2026-73348 |
|
2026-08-18 |
| high |
CVE-2026-73345 — Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions. |
vulnerability |
nvd |
CVE-2026-73345 |
|
2026-08-18 |
| critical |
CVE-2026-73343 — Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. |
vulnerability |
nvd |
CVE-2026-73343 |
rce |
2026-08-18 |
| high |
CVE-2026-73342 — Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions. |
vulnerability |
nvd |
CVE-2026-73342 |
|
2026-08-18 |
| critical |
CVE-2026-73341 — Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions. |
vulnerability |
nvd |
CVE-2026-73341 |
|
2026-08-18 |
| critical |
CVE-2026-73339 — Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions. |
vulnerability |
nvd |
CVE-2026-73339 |
|
2026-08-18 |
| high |
CVE-2026-73338 — Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions. |
vulnerability |
nvd |
CVE-2026-73338 |
|
2026-08-18 |
| high |
CVE-2026-73190 — Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions. |
vulnerability |
nvd |
CVE-2026-73190 |
|
2026-08-18 |
| medium |
CVE-2026-73189 — Subscriber Insecure Direct Object References (IDOR) in WP Crowdfunding < 2.2.1 versions. |
vulnerability |
nvd |
CVE-2026-73189 |
|
2026-08-18 |
| critical |
CVE-2026-73187 — Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions. |
vulnerability |
nvd |
CVE-2026-73187 |
|
2026-08-18 |
| high |
CVE-2026-73181 — Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 ver… |
vulnerability |
nvd |
CVE-2026-73181 |
|
2026-08-18 |
| unknown |
CVE-2026-71539 — n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git n… |
vulnerability |
nvd |
CVE-2026-71539 |
|
2026-08-18 |
| medium |
CVE-2026-70657 — Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks director… |
vulnerability |
nvd |
CVE-2026-70657 |
|
2026-08-18 |
| high |
CVE-2026-69189 — Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.use… |
vulnerability |
nvd |
CVE-2026-69189 |
|
2026-08-18 |
| unknown |
CVE-2026-68939 — Pyenv provides simple Python version management. Prior to 2.8.0, is_version_safe() in libexec/pyenv-… |
vulnerability |
nvd |
CVE-2026-68939 |
|
2026-08-18 |
| medium |
CVE-2026-68568 — Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions. |
vulnerability |
nvd |
CVE-2026-68568 |
|
2026-08-18 |
| high |
CVE-2026-68567 — Unauthenticated Cross Site Scripting (XSS) in Convert Pro <= 1.0.1 versions. |
vulnerability |
nvd |
CVE-2026-68567 |
|
2026-08-18 |
| medium |
CVE-2026-68565 — Contributor Cross Site Scripting (XSS) in GeoDirectory <= 2.8.172 versions. |
vulnerability |
nvd |
CVE-2026-68565 |
|
2026-08-18 |
| high |
CVE-2026-66793 — A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Man… |
vulnerability |
nvd |
CVE-2026-66793 |
|
2026-08-18 |
| medium |
CVE-2026-66679 — Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions. |
vulnerability |
nvd |
CVE-2026-66679 |
|
2026-08-18 |
| high |
CVE-2026-66667 — Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions. |
vulnerability |
nvd |
CVE-2026-66667 |
|
2026-08-18 |
| medium |
CVE-2026-66651 — Unauthenticated Broken Access Control in MultiVendorX <= 5.0.14 versions. |
vulnerability |
nvd |
CVE-2026-66651 |
|
2026-08-18 |
| medium |
CVE-2026-66646 — Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions. |
vulnerability |
nvd |
CVE-2026-66646 |
|
2026-08-18 |
| medium |
CVE-2026-66645 — Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions. |
vulnerability |
nvd |
CVE-2026-66645 |
|
2026-08-18 |
| medium |
CVE-2026-66644 — Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions. |
vulnerability |
nvd |
CVE-2026-66644 |
|
2026-08-18 |
| medium |
CVE-2026-66643 — Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions. |
vulnerability |
nvd |
CVE-2026-66643 |
|
2026-08-18 |
| medium |
CVE-2026-66641 — Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions. |
vulnerability |
nvd |
CVE-2026-66641 |
|
2026-08-18 |
| medium |
CVE-2026-66640 — Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions. |
vulnerability |
nvd |
CVE-2026-66640 |
|
2026-08-18 |
| medium |
CVE-2026-66639 — Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4… |
vulnerability |
nvd |
CVE-2026-66639 |
|
2026-08-18 |