Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
6.5 MEDIUM
CVE-2026-66686 — WordPress Plugins Garbage Collector (Database Cleanup) plugin <= 0.14 - Cross Site Reques…

Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions.

Remote | Cross-Site Request Forgery
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
5.3 MEDIUM
CVE-2026-66685 — WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.

Remote | Information Disclosure
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
5.3 MEDIUM
CVE-2026-66684 — WordPress Export Import Menus plugin <= 1.9.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.

export_import_menus | Remote | Information Disclosure
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
5.3 MEDIUM
CVE-2026-66683 — WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerabil…

Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.

Remote | Information Disclosure
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
4.3 MEDIUM
CVE-2026-66681 — WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerabili…

Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions.

Remote | Cross-Site Request Forgery
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
4.3 MEDIUM
CVE-2026-66678 — WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Cont…

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.

Remote | Authorization
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
10.0 CRITICAL
CVE-2026-66665 — WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.

Remote | Authentication
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
7.1 HIGH
CVE-2026-66664 — WordPress SEO plugin by Squirrly SEO plugin <= 14.2.0 - Cross Site Scripting (XSS) vulner…

Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.

Remote | Cross-Site Scripting
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
7.1 HIGH
CVE-2026-66663 — WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

Remote | Cross-Site Scripting
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
9.8 CRITICAL
CVE-2026-66662 — WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Privilege Escalation vulnerabi…

Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.

Remote | Authentication
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
7.1 HIGH
CVE-2026-66470 — WordPress Frontend Admin by DynamiApps plugin <= 3.29.10 - Broken Access Control vulnerab…

Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions.

Remote | Authorization
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
7.1 HIGH
CVE-2026-66457 — WordPress Events Manager plugin <= 7.4.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Events Manager <= 7.4.1 versions.

Remote | Cross-Site Scripting
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
6.5 MEDIUM
CVE-2026-66452 — WordPress Legal Text Connector of the IT-Recht Kanzlei plugin <= 1.0.13 - Broken Access C…

Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions.

Remote | Authorization
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
6.5 MEDIUM
CVE-2026-66451 — WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.

Remote | Authentication
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
9.3 CRITICAL
CVE-2026-66447 — WordPress WordPress File Upload plugin <= 5.1.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.

Remote | Injection
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
7.1 HIGH
CVE-2026-66440 — WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS)…

Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.

Remote | Cross-Site Scripting
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
7.1 HIGH
CVE-2026-66439 — WordPress Advanced AJAX Product Filters plugin <= 3.2.0.3 - Cross Site Scripting (XSS) vu…

Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.

advanced_ajax_product_filters | Remote | Cross-Site Scripting
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
6.5 MEDIUM
CVE-2026-66425 — WordPress Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Cust…

Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.

Remote | Authentication
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
9.8 CRITICAL
CVE-2026-65581 — WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.

Remote | Injection
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
9.8 CRITICAL
CVE-2026-65579 — WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.

agricola | Remote | Injection
Aug 06, 2026 Aug 06, 2026
Aug 06, 2026
Aug 06, 2026
Showing 20 of 9989 Results