CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- hcl software iemHCL IntelliOps Event Management is affected by multiple security vulnerabilities.5.9 Medium
- checkmk gmbh checkmkFrozen BI aggregations leak host and service names to unauthorized users2.3 Low
- hcl software iemHCL IntelliOps Event Management is affected by multiple security vulnerabilities.5.0 Medium
- hcl software iemHCL IntelliOps Event Management is affected by multiple security vulnerabilities.5.4 Medium
- anders norén kojiWordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability7.5 High
- paulepro2019 eprolo dropshippingWordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerability7.1 High
- themagnifico52 warehouse cargoWordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability9.9 Critical
- themagnifico52 smart cleaningWordPress Smart Cleaning theme <= 4.8.6 - Arbitrary File Upload vulnerability9.9 Critical
- indithemes it residenceWordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability9.9 Critical
- eshipper commerce, wordpress.com eshipper commerce +1 moreWordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability8.5 High
- wpeverest user registration & membership proWordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability9.8 Critical
- axew3 wp w3all phpbbWordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability8.5 High
- roxnor fundengineWordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability9.8 Critical
- jonathan daggerhart query wranglerWordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability9.9 Critical
- hakan ozevin wp base bookingWordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- repute infosystems bookingpress appointment booking proWordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability9.3 Critical
- notificationx proWordPress NotificationX Pro plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- tyche softwares abandoned cart pro for woocommerceWordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability9.8 Critical
- plainware locatoraid store locatorWordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability9.3 Critical
- vaultdweller leykaWordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability7.6 High
- monkeysan flatasticWordPress Flatastic theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- monkeysan flatasticWordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability9.8 Critical
- e-plugins directory proWordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability9.3 Critical
- radiustheme homlistiWordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability6.5 Medium
- 10web form maker by 10webWordPress Form Maker by 10Web plugin <= 1.15.49 - Cross Site Scripting (XSS) vulnerability7.1 High
- eric teubert podlove podcast publisherWordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- seo squirrly plugin by squirrly seoWordPress SEO Plugin by Squirrly SEO plugin <= 14.2.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- thembay aoraWordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability7.1 High
- paymob for woocommerceWordPress Paymob for WooCommerce plugin <= 4.1.10 - Cross Site Scripting (XSS) vulnerability7.1 High
- codexthemes thegem (elementor)WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability9.3 Critical
- themehunk advance product searchWordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability7.1 High
- themegrill smartsmtpWordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- hasthemes swatchly – woocommerce variation swatches for productsWordPress Swatchly – WooCommerce Variation Swatches for Products plugin <= 1.4.13 - Cross Site Scripting (XSS) vulnerability7.1 High
- paolo geodirectoryWordPress GeoDirectory plugin <= 2.8.173 - Cross Site Scripting (XSS) vulnerability7.1 High
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.39 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- david lingren media library assistantWordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability9.1 Critical
- kings plugins b2bking premiumWordPress B2BKing Premium plugin <= 5.6.07 - Cross Site Scripting (XSS) vulnerability7.1 High
- melograno venture studio wpdatatablesWordPress wpDataTables plugin <= 6.5.1.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- passionate programmer peter wp data accessWordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability5.9 Medium
- lukeseager wordpress persistent loginWordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability8.5 High
- cleantalk security & malware scan by cleantalkWordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability9.3 Critical
- rtcamp rtmedia for wordpress, buddypress and bbpressWordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability9.3 Critical
- tagembedWordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability7.1 High
- themewinter wp cafe proWordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability6.6 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability9.8 Critical
- cozmoslabs translatepressWordPress TranslatePress plugin <= 3.3.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.14.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- uxper golo frameworkWordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability8.1 High
- themegoods altairWordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability6.5 Medium
- themegoods capellaWordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability9.8 Critical
- Show moreLoading…