CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- wpcreatix media sweep – wordpress media cleanerMedia Sweep <= 1.1.3 - Authenticated (Administrator+) SQL Injection via 'fields' Parameter4.9 Medium
- ultimatemember ultimate member – user profile, registration, login, member directory, content restriction & membership pluginUltimate Member <= 2.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Textarea Profile Field with HTML Support (DOM Gadget via id Attribute)6.4 Medium
- roxnor shopengine elementor woocommerce builder addon – all in one woocommerce solution with ecommerce templates & woo widgetsShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes7.2 High
- servmask all-in-one wp migration and backupAll-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution8.8 High
- formulaagile my agile privacy® – cmp, cookie consent & privacy toolsMy Agile Privacy® <= 3.3.6 - Missing Authorization to Unauthenticated Plugin Settings Modification via map_missing_cookie_shield / map_check_consent_mode_status AJAX Actions5.3 Medium
- contrid newslettersNewsletters <= 4.17 - Missing Authorization to Authenticated (Author+) Arbitrary Modification via 'newsletters_mailinglistsroles' POST Parameter4.3 Medium
els-os-releaseTuxCareUpdate of els-os-releaseNo score- red hat build of keycloak 26.6, build of keycloak 26.6.7, single sign-on 7 +2 moreKeycloak-services: keycloak-services: jwt bearer authorization grant does not enforce consentrequired5.9 Medium
- cloud foundry uaa, cf-deployment +1 moreCase-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise8.7 High
- liketrek trekliketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication5.3 Medium
- poppler innodata labsUncontrolled memory usage in Innodata Labs’ Poppler JPX decoder8.7 High
- adenhq hiveHCL Hive is affected by multiple security vulnerabilities.5.4 Medium
- adenhq hiveHCL Hive is affected by multiple security vulnerabilities.4.2 Medium
- adenhq hiveHCL Hive is affected by multiple security vulnerabilities.3.7 Low
- apache hiveApache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths9.8 Critical
- apache hiveApache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url9.1 Critical
- apache hiveApache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user7.4 High
- ilya-zlobintsev lactPredictable temporary file in /tmp allows symlink attack in LACT6.9 Medium
- hbshbs vulnerable to XSS via registerAsyncHelper output-escaping bypass8.1 High
- apache dolphinschedulerApache DolphinScheduler: General user can mint admin access tokens via /access-tokens8.8 High
- ilya-zlobintsev lactPolkit authentication bypass in LACT7.3 High
- implecode ecommerce product catalogeCommerce Product Catalog <= 3.5.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute6.4 Medium
- octopus codefreshIn affected versions of the Codefresh platform an authenticated user can utilize an API endpoint...8.6 High
- typo3 extension "apache solr for typo3 - enterprise search"Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)7.6 High
- typo3 extension "apache solr for typo3 - enterprise search"Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)6.3 Medium
- typo3 extension "apache solr for typo3 - enterprise search"Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)6.3 Medium
- typo3 extension "apache solr for typo3 - enterprise search"Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)7.7 High
- typo3 extension "apache solr for typo3 - enterprise search"Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)6.3 Medium
- typo3 extension "modules"Information Disclosure in extension "Modules" (modules)6.0 Medium
- typo3 extension "event management and registration"Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)7.7 High
- typo3 extension "event management and registration"Broken Access Control in extension "Event management and registration" (sf_event_mgt)6.3 Medium
- typo3 extension "syssy - typo3 monitoring & security checks"Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)5.3 Medium
- typo3 extension "syssy - typo3 monitoring & security checks"Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)5.3 Medium
- typo3 extension "femanager"Broken Access Control in extension "femanager" (femanager)6.0 Medium
- typo3 extension "femanager"Information Disclosure in extension "femanager" (femanager)8.2 High
- typo3 extension "femanager"Broken Access Control in extension "femanager" (femanager)8.3 High
- typo3 extension "powermail"Server-Side Template Injection in extension "powermail" (powermail)9.5 Critical
- typo3 extension "html5 video player vs. powermail"Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)9.3 Critical
- typo3 extension "forms export"SQL Injection in extension "Forms Export" (frp_form_answers)7.7 High
- typo3 extension "mask"Path Traversal in extension "Mask" (mask)6.0 Medium
- typo3 extension "telephone directory"Broken Access Control in extension "Telephone Directory" (telephonedirectory)8.7 High
- typo3 extension "industry directory"Broken Access Control in extension "Industry Directory" (yellowpages2)8.8 High
- typo3 extension "club directory"Broken Access Control in extension "Club Directory" (clubdirectory)8.8 High
- typo3 extension "forum"Broken Access Control in extension "Forum" (pforum)8.8 High
- typo3 extension "events 2"Broken Access Control in extension "Events 2" (events2)7.1 High
- typo3 extension "events 2"Broken Access Control in extension "Events 2" (events2)7.1 High
- typo3 extension "femanager"Broken Access Control in extension "femanager" (femanager)8.3 High
- weidmueller ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +1 moreSMS Password Authorization Bypass via Failed Attempt Counter8.8 High
- weidmueller ie-sr-2tx-wl, ie-sr-2tx-wl-4g-eu, ie-sr-2tx-wl-4g-us-v +2 moreUnauthenticated Remote Code Execution via Shell Injection in Web Management Interface9.3 Critical
- checkmk gmbh checkmkMissing authorization for viewing background jobs5.3 Medium
- Show moreLoading…