Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
49358
Total
3967
Critical
14633
High
14397
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-66440 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions. | Aug 06, 2026 |
| CVE-2026-66439 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. | Aug 06, 2026 |
| CVE-2026-66425 | MEDIUM | 6.5 | Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions. | Aug 06, 2026 |
| CVE-2026-65581 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions. | Aug 06, 2026 |
| CVE-2026-65579 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions. | Aug 06, 2026 |
| CVE-2026-65578 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Agora <= 1.9 versions. | Aug 06, 2026 |
| CVE-2026-65577 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. | Aug 06, 2026 |
| CVE-2026-65576 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions. | Aug 06, 2026 |
| CVE-2026-65575 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions. | Aug 06, 2026 |
| CVE-2026-65574 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Abogado <= 1.18 versions. | Aug 06, 2026 |
| CVE-2026-65573 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. | Aug 06, 2026 |
| CVE-2026-65572 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions. | Aug 06, 2026 |
| CVE-2026-65571 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions. | Aug 06, 2026 |
| CVE-2026-65570 | HIGH | 8.1 | Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions. | Aug 06, 2026 |
| CVE-2026-65569 | HIGH | 8.5 | Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions. | Aug 06, 2026 |
| CVE-2026-65565 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions. | Aug 06, 2026 |
| CVE-2026-65560 | HIGH | 7.1 | Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. | Aug 06, 2026 |
| CVE-2026-65559 | HIGH | 7.2 | Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions. | Aug 06, 2026 |
| CVE-2026-65556 | CRITICAL | 9.8 | Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions. | Aug 06, 2026 |
| CVE-2026-65554 | HIGH | 7.1 | Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions. | Aug 06, 2026 |
| CVE-2026-65553 | CRITICAL | 10.0 | Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions. | Aug 06, 2026 |
| CVE-2026-65552 | CRITICAL | 9.8 | Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions. | Aug 06, 2026 |
| CVE-2026-65549 | HIGH | 7.2 | Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions. | Aug 06, 2026 |
| CVE-2026-65548 | CRITICAL | 9.9 | Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions. | Aug 06, 2026 |
| CVE-2026-65547 | HIGH | 8.5 | Subscriber SQL Injection in Creative Mail <= 1.6.9 versions. | Aug 06, 2026 |