CVE-2026-61959
— WordPress Business Directory plugin <= 6.4.24 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-54489
— Dell Virtual Storage Integrator Sensitive Information Disclosure Vulnerability
Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potential…
Remote
|
Information Disclosure
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-53976
— OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary fil…
Remote
|
Path Traversal
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-53975
— OpenChamber 1.11.7 Unauthenticated RCE via /api/fs/exec
OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exe…
Remote
|
Injection
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-34502
— Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client
This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-34501
— Apache Portable Runtime Utility: Heap buffer overflow in APR redis client
Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.
This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.
Users are recommended to upgr…
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-34191
— Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.
This issue affects Apache Portable …
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-32548
— WordPress SureCart plugin <= 4.6.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.
Remote
|
Authorization
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-32469
— WordPress CAPTCHA 4WP plugin <= 7.6.0 - Captcha Bypass vulnerability
Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.
Remote
|
Authentication
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-32327
— Apache Portable Runtime Utility: apr-util XML stack recursion crash
A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function.
Users a…
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28183
— WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability
Editor Privilege Escalation in PublishPress Capabilities <= 2.45.0 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28180
— WordPress Mercado Pago payments for WooCommerce plugin <= 8.9.0 - Insecure Direct Object …
Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions.
Remote
|
Authorization
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28179
— WordPress FiboSearch plugin <= 1.33.0 - Cross Site Scripting (XSS) vulnerability
Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28178
— WordPress Powerkit plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions.
powerkit
|
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28177
— WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28172
— WordPress Tracking Code Manager plugin <= 2.6.0 - CSRF to Stored XSS vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.
Remote
|
Cross-Site Request Forgery
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28169
— WordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vuln…
Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions.
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28146
— WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.…
Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions.
Remote
|
Path Traversal
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28143
— WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
CVE-2026-28141
— WordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions.
Remote
|
Cross-Site Scripting
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
