Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
CVE Intelligence

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

All Critical Actively Exploited Remotely Exploitable
Last Updated Published CVSS Score
Score
Vulnerability
Published
7.1 HIGH
CVE-2026-73360 — WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Chaty Pro <= 3.5.8 versions.

chaty_pro | Remote | Cross-Site Scripting
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
6.5 MEDIUM
CVE-2026-73359 — WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.3.9 - Cross Site…

Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.

wp_cookie_consent | Remote | Cross-Site Scripting
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
7.1 HIGH
CVE-2026-73358 — WordPress Affiliates Manager plugin <= 2.9.53 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

affiliates_manager | Remote | Cross-Site Scripting
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
8.2 HIGH
CVE-2026-73356 — WordPress Breeze plugin <= 2.5.12 - Arbitrary Content Deletion vulnerability

Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.

breeze | Remote | Authentication
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
9.3 CRITICAL
CVE-2026-73355 — WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.

affiliates_manager | Remote | Injection
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
6.5 MEDIUM
CVE-2026-73352 — WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.

givewp | Remote | Authorization
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
7.1 HIGH
CVE-2026-73351 — WordPress WordPress Social Login and Register plugin <= 7.8.1 - Cross Site Scripting (XSS…

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.

wordpress_social_login_and_register_\(discord\,_google\,_twitter\,_linkedin\) | Remote | Cross-Site Scripting
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
8.2 HIGH
CVE-2026-73350 — WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.

supportcandy | Remote | Authentication
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
6.5 MEDIUM
CVE-2026-73348 — WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.

givewp | Remote | Authorization
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
7.1 HIGH
CVE-2026-73345 — WordPress License Manager for WooCommerce plugin <= 3.0.18 - SQL Injection vulnerability

Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.

license_manager_for_woocommerce | Remote | Injection
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
10.0 CRITICAL
CVE-2026-73343 — WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.

wp_compress | Remote | Authentication
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
7.1 HIGH
CVE-2026-73342 — WordPress WP Multilang plugin <= 2.4.31 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.

Remote | Cross-Site Scripting
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
9.8 CRITICAL
CVE-2026-73341 — WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.

registrationmagic | Remote | Injection
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
9.3 CRITICAL
CVE-2026-73339 — WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.

modern_events_calendar | Remote | Injection
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
7.1 HIGH
CVE-2026-73338 — WordPress Autopay plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.

Remote | Cross-Site Scripting
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
7.1 HIGH
CVE-2026-73190 — WordPress WPDM – Premium Packages plugin <= 7.0.5 - Cross Site Scripting (XSS) vulnerabil…

Unauthenticated Cross Site Scripting (XSS) in WPDM – Premium Packages <= 7.0.5 versions.

premium_packages_-_sell_digital_products_securely | Remote | Cross-Site Scripting
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
9.3 CRITICAL
CVE-2026-73187 — WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.

sticky_chat_widget | Remote | Injection
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
7.5 HIGH
CVE-2026-73181 — WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File D…

Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.

Remote | Path Traversal
Aug 18, 2026 Aug 20, 2026
Aug 18, 2026
Aug 20, 2026
8.9 HIGH
CVE-2026-71539 — n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code E…

n8n is an open source workflow automation platform. Prior to 1.123.64, 2.29.8, and 2.30.1, the Git node clone operation allows an authenticated workflow user to swap a validated directory for a symli…

n8n | Remote | Supply Chain
Aug 18, 2026 Aug 19, 2026
Aug 18, 2026
Aug 19, 2026
4.3 MEDIUM
CVE-2026-70657 — Copyparty: file/dirkey confusion

Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can convert a valid file key into a directory …

copyparty | Remote | Authorization
Aug 18, 2026 Aug 19, 2026
Aug 18, 2026
Aug 19, 2026
Showing 20 of 14714 Results