CVE-2026-19489
— NetScaler ADC and NetScaler Gateway Information Disclosure Vulnerability
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
Remote
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-76235
— Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cooki…
A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attack…
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73391
— WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Total Donations <= 2.0.5 versions.
Remote
|
Injection
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73390
— WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Total Donations <= 2.0.5 versions.
Remote
|
Authorization
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73389
— WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kalles Addons <= 1.0.6 versions.
Remote
|
Injection
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73388
— WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability
Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.
Remote
|
Injection
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73387
— WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Resido <= 1.5 versions.
Remote
|
Path Traversal
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73386
— WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Dat…
Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73385
— WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions.
Remote
|
Authorization
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73384
— WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.
Remote
|
Information Disclosure
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73364
— WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability
Customer PHP Object Injection in Flexible Subscriptions <= 1.8.1 versions.
Remote
|
Injection
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73363
— WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Access Control vul…
Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce < 2.0.8 versions.
Remote
|
Authorization
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73354
— WordPress SimplyRETS Real Estate IDX plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnera…
Unauthenticated Cross Site Scripting (XSS) in SimplyRETS Real Estate IDX <= 3.2.8 versions.
Remote
|
Cross-Site Scripting
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73347
— WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in TrueBooker <= 1.2.6 versions.
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73185
— WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in NGG Smart Image Search < 4.0.0 versions.
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73184
— WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Global Gallery <= 11.1.2 versions.
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73183
— WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
Unauthenticated SQL Injection in Maps Marker Pro <= 4.32 versions.
Remote
|
Injection
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-73182
— WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in BBQ Pro <= 3.9 versions.
Remote
|
Cross-Site Scripting
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-66668
— WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability
Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.
Remote
|
Injection
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
CVE-2026-66613
— WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability
Unauthenticated Remote Code Execution (RCE) in JetEngine <= 3.8.14 versions.
Remote
|
Authentication
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026
Aug 19, 2026