CVE-2026-32468
— WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.
Remote
|
Information Disclosure
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-32467
— WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (S…
Subscriber Server Side Request Forgery (SSRF) in [Aotuman] Grab WeChat Articles <= 2.0.1 versions.
Remote
|
Server-Side Request Forgery
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-32466
— WordPress Gravity Forms Bookings premium plugin <= 2.1 - SQL Injection vulnerability
Subscriber SQL Injection in Gravity Forms Bookings premium <= 2.1 versions.
Remote
|
Injection
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-32465
— WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
Customer PHP Object Injection in Essential Real Estate <= 5.3.3 versions.
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-32464
— WordPress Theme Test Drive plugin <= 2.9.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.
Remote
|
Path Traversal
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-32463
— WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload vulnerability
Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.
Remote
|
Authentication
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-32444
— WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability
Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.
Remote
|
Injection
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-32333
— WordPress Mayosis Core plugin <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerabili…
Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.
Remote
|
Cross-Site Scripting
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-28571
— WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.
Remote
|
Authorization
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-28570
— WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.
Remote
|
Path Traversal
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-28569
— WordPress SSL Zen plugin <= 4.7.43 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions.
Remote
|
Cross-Site Scripting
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-28568
— WordPress Quill Forms plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.
Remote
|
Cross-Site Scripting
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-28567
— WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.
Remote
|
Authorization
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-28192
— WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.67 - Arbitrary File Upload vulne…
Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.
Remote
|
Authentication
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-28191
— WordPress The Grid plugin <= 2.7.9.1 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in The Grid <= 2.7.9.1 versions.
Remote
|
Authorization
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-17084
— stringprep.map_table_b2() deviates from RFC 3454 Table B.2 — breaks IDNA interoperability
The "stringprep" module didn't process characters from RFC 3454 tables
B.2 or B.3 correctly: the latest Unicode codepoint attributes were used
instead of the specified Unicode 3.2.0. This behavior …
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-73692
— Authorization Bypass via Inverted Boolean in clonetasks Mass Action in Dolibarr ERP/CRM
Dolibarr contains an authorization bypass vulnerability in the clonetasks mass action that allows authenticated users with project creation permissions to clone tasks into private projects they are n…
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-50575
— BetterDesk has a replay behavior vulnerability when devices are deleted
BetterDesk is a remote desktop management solution. BetterDesk versions through 2.3.0 improperly invalidate deleted device identities, allowing an unauthenticated client to replay or spoof a device I…
|
Authentication
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-24301
— Microsoft Copilot Information Disclosure Vulnerability
None
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
CVE-2026-75874
— Sandbox escape in the Remote Settings Client component
Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154.
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026
Aug 18, 2026