CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- ransomlookRansomLook Unauthenticated Database Export Exposes Private Data9.2 Critical
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection6.9 Medium
- ransomlookMissing Authentication Allows Unauthorized Creation of Crypto Groups in RansomLook8.8 High
- hclsoftware hcl hiveHCL Hive is affected by a broken access control vulnerability7.2 High
- roskus prospero flow crmIDOR and missing authorization in Prospero Flow CRM supplier API allows cross-tenant read and modification9.3 Critical
- sourcecodester simple online food ordering systemSourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection6.9 Medium
- hclsoftware hcl hiveHCL Hive is affected by an information exposure vulnerability4.3 Medium
azure_security_keyvault_keyscrates.ioRejected authentication challenges can poison the Key Vault scope cacheNo scoreazure_security_keyvault_secretscrates.ioRejected authentication challenges can poison the Key Vault scope cacheNo scoreazure_security_keyvault_certificatescrates.ioRejected authentication challenges can poison the Key Vault scope cacheNo scorelibcrux-kemcrates.ioPanic on Decoding Short Hybrid Keys8.7 Highstable-veccrates.ioPanic-safety unsoundness in `BitVecCore::clear` (double-free / use-after-free)No score- elated-themes måneWordPress Måne theme <= 1.7 - Local File Inclusion vulnerability8.1 High
- theme-rex freightcoWordPress FreightCo theme <= 1.1.15 - PHP Object Injection vulnerability9.8 Critical
- mvpthemes jawnWordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability9.8 Critical
- thembay urnaWordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- themewinter wp cafe proWordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability9.8 Critical
- themewinter wp cafe proWordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerability7.5 High
- redefiningtheweb affiliate pro - affiliate program for woocommerce & wordpressWordPress Affiliate Pro - Affiliate Program for WooCommerce & WordPress plugin <= 8.9.1 - Privilege Escalation vulnerability9.8 Critical
- divinext woo essentialWordPress Woo Essential plugin <= 4.3.0 - SQL Injection vulnerability9.3 Critical
- wedevs pte. ltd wp project manager proWordPress WP Project Manager Pro plugin <= 4.0.1 - SQL Injection vulnerability8.5 High
- radiustheme, llc shopbuilder pro – elementor woocommerce builder addonsWordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability8.6 High
- amplebyte pvt limited brave conversion engine (pro), brave conversion engine (pro) +1 moreWordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- themebing prolancer elementWordPress ProLancer Element plugin <= 1.4.8 - SQL Injection vulnerability8.5 High
- themebing prolancer elementWordPress ProLancer Element plugin <= 1.4.8 - Broken Access Control vulnerability7.1 High
- vanquish woocommerce file approvalWordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability8.6 High
- super forms forms, webrehab super forms +1 moreWordPress Super Forms plugin <= 6.3.316 - Arbitrary File Download vulnerability7.5 High
- goodlayers tourmasterWordPress Tourmaster plugin <= 5.4.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- unitedover, llc digitsWordPress Digits plugin <= 9.2 - Privilege Escalation vulnerability9.8 Critical
- franky events made easyWordPress Events Made Easy plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability7.1 High
- notification master – real-time wordpress notifications with email, sms, webhooks & moreWordPress Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More plugin <= 1.7.1 - Broken Access Control vulnerability7.5 High
- select-themes tonda coreWordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability8.1 High
- select-themes tondaWordPress Tonda theme < 2.6 - Local File Inclusion vulnerability8.1 High
- elated-themes verdure coreWordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability8.1 High
- blockart magazine blocksWordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- hashthemes hash formWordPress Hash Form plugin <= 1.4.0 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- wp manageninja llc fluent support proWordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- wp manageninja llc fluent boards proWordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability5.3 Medium
- wp manageninja llc fluentcrm proWordPress FluentCRM Pro plugin <= 3.1.12 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- wp manageninja llc fluent support proWordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability5.4 Medium
- wp manageninja llc fluentcrm proWordPress FluentCRM Pro plugin <= 3.1.12 - SQL Injection vulnerability7.6 High
- tammersoft shared filesWordPress Shared Files plugin <= 1.7.69 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- magepeople inc. booking and rental managerWordPress Booking and Rental Manager plugin <= 2.7.5 - Broken Access Control vulnerability5.3 Medium
- inisev social media & share iconsWordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- liquid web / stellarwp wpcompleteWordPress WPComplete plugin <= 2.9.5.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- aa web servant 12 step meeting listWordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability7.1 High
- ateeq rafeeq repairbuddyWordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerability5.3 Medium
- bigprof online clinic management systemitsourcecode Online Clinic Management System Admin Login login.php sql injection6.9 Medium
- kaon pg5298a, pg5298b +1 moreAuthenticated RCE in KAON PG52988.5 High
- kaon pg5298a, pg5298b +1 moreMissing Authentication for Critical Function in KAON PG52987.1 High
- Show moreLoading…