Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-19734 | 8.6 (v4.0) | IDOR in Prospero Flow CRM allows cross-tenant product … |
Roskus |
Prospero Flow CRM |
2026-08-13T14:04:55.560Z | 2026-08-13T17:00:47.693Z |
| cve-2026-68454 | KVM: s390: pci: Fix handling of AIF enable without AISB |
Linux |
Linux |
2026-08-13T13:59:57.209Z | 2026-08-17T05:05:54.455Z | |
| cve-2026-68453 | s390/zcrypt: Fix buffer over-read in cca_cipher2protkey |
Linux |
Linux |
2026-08-13T13:59:56.036Z | 2026-08-17T05:05:53.346Z | |
| cve-2026-68452 | s390/zcrypt: Validate length for CCA AES cipher key requests |
Linux |
Linux |
2026-08-13T13:59:54.840Z | 2026-08-19T16:35:50.661Z | |
| cve-2026-68451 | s390/zcrypt: Validate length for CCA ECC private key r… |
Linux |
Linux |
2026-08-13T13:59:53.674Z | 2026-08-19T16:35:48.084Z | |
| cve-2026-14456 | Unbounded Memory Growth in QUIC Server Incoming Channe… |
OpenSSL |
OpenSSL |
2026-08-13T13:55:52.370Z | 2026-08-13T17:41:29.420Z | |
| cve-2026-66256 | Apache Shindig Common, Apache Shindig Social-Api: Remo… |
Apache Software Foundation |
Apache Shindig Common |
2026-08-13T13:53:34.930Z | 2026-08-13T16:18:21.390Z | |
| cve-2026-28002 | 8.5 (v3.1) | WordPress Booktics plugin 1.0.22 - SQL Injection vulne… |
Arraytics |
Booktics |
2026-08-13T13:42:09.081Z | 2026-08-13T15:33:53.641Z |
| cve-2026-73403 | 5.3 (v3.1) | WordPress User Registration plugin <= 5.2.6 - Broken A… |
wpeverest |
User Registration |
2026-08-13T13:37:25.760Z | 2026-08-13T15:33:35.336Z |
| cve-2026-73401 | 5.3 (v3.1) | WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken A… |
InstaWP |
InstaWP Connect |
2026-08-13T13:37:25.109Z | 2026-08-13T15:45:36.002Z |
| cve-2026-73357 | 6.5 (v3.1) | WordPress GiveWP plugin < 4.16.6 - Cross Site Scriptin… |
Nexcess |
GiveWP |
2026-08-13T13:37:24.466Z | 2026-08-13T15:33:21.755Z |
| cve-2026-73353 | 5.3 (v3.1) | WordPress Revolut Gateway for WooCommerce plugin < 4.2… |
revolutbusiness |
Revolut Gateway for WooCommerce |
2026-08-13T13:37:23.829Z | 2026-08-13T15:33:08.182Z |
| cve-2026-73349 | 5.3 (v3.1) | WordPress GiveWP plugin < 4.16.6 - Broken Access Contr… |
Nexcess |
GiveWP |
2026-08-13T13:37:23.200Z | 2026-08-13T15:32:54.081Z |
| cve-2026-73346 | 7.6 (v3.1) | WordPress MailChimp For WooCommerce plugin < 6.2 - SQL… |
Mailchimp |
MailChimp For WooCommerce |
2026-08-13T13:37:22.568Z | 2026-08-13T15:47:13.176Z |
| cve-2026-73344 | 5.9 (v3.1) | WordPress WP Data Access plugin <= 5.5.79 - Cross Site… |
Passionate Programmer Peter |
WP Data Access |
2026-08-13T13:37:21.936Z | 2026-08-13T15:32:23.285Z |
| cve-2026-73340 | 6.5 (v3.1) | WordPress Featured Image from URL plugin <= 5.3.3 - Cr… |
fifu.app |
Featured Image from URL |
2026-08-13T13:37:21.296Z | 2026-08-13T15:32:39.087Z |
| cve-2026-73188 | N/A | {'providerMetadata': {'orgId': '21595511-bba5-4825-b968-b78d1f9984a3', 'shortName': 'Patchstack', 'dateUpdated': '2026-08-14T08:44:47.413Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to\xa0CVE-2026-13610.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-13610.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.4'}} | N/A | N/A | 2026-08-13T13:37:20.662Z | 2026-08-14T08:44:47.413Z |
| cve-2026-66704 | 7.2 (v3.1) | WordPress Gutenverse Companion plugin <= 2.5.1 - Serve… |
Jegstudio |
Gutenverse Companion |
2026-08-13T13:37:19.999Z | 2026-08-13T15:47:16.363Z |
| cve-2026-66700 | 7.1 (v3.1) | WordPress Smart Online Order for Clover plugin <= 1.6.… |
ZAYTECH |
Smart Online Order for Clover |
2026-08-13T13:37:19.362Z | 2026-08-13T15:31:54.857Z |
| cve-2026-66698 | 7.1 (v3.1) | WordPress SureDash plugin <= 1.10.1 - Cross Site Scrip… |
Brainstorm Force |
SureDash |
2026-08-13T13:37:18.719Z | 2026-08-13T15:31:41.324Z |
| cve-2026-66697 | 7.1 (v3.1) | WordPress Colissimo Officiel : Méthodes de livraison p… |
Colissimo |
Colissimo Officiel : Méthodes de livraison pour WooCommerce |
2026-08-13T13:37:18.059Z | 2026-08-13T15:21:39.897Z |
| cve-2026-66693 | 6.5 (v3.1) | WordPress Motors plugin <= 1.4.113 - Broken Access Con… |
Stylemix |
Motors |
2026-08-13T13:37:17.420Z | 2026-08-13T15:47:19.753Z |
| cve-2026-66691 | 9.8 (v3.1) | WordPress Nokri theme <= 1.6.6 - Broken Access Control… |
scriptsbundle |
Nokri |
2026-08-13T13:37:16.786Z | 2026-08-13T15:21:26.541Z |
| cve-2026-66689 | 6.3 (v3.1) | WordPress Anti Spam and list cleaner – AcyChecker plug… |
AcyMailing Newsletter Team |
Anti Spam and list cleaner – AcyChecker |
2026-08-13T13:37:16.143Z | 2026-08-13T15:20:59.484Z |
| cve-2026-66687 | 6.5 (v3.1) | WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scr… |
magepeopleteam |
WpBookingly |
2026-08-13T13:37:15.506Z | 2026-08-13T15:21:13.231Z |
| cve-2026-66661 | 7.7 (v3.1) | WordPress Directories Pro plugin <= 2.0.5 - Privilege … |
Onokazu |
Directories Pro |
2026-08-13T13:37:14.866Z | 2026-08-13T15:47:23.054Z |
| cve-2026-66660 | 6.5 (v3.1) | WordPress Contact Form 7 – PayPal & Stripe Add-on plug… |
Scott Paterson |
Contact Form 7 – PayPal & Stripe Add-on |
2026-08-13T13:37:14.229Z | 2026-08-13T15:20:29.255Z |
| cve-2026-66658 | 8.5 (v3.1) | WordPress Reviewer plugin <= 3.14.2 - SQL Injection vu… |
MVPThemes |
Reviewer |
2026-08-13T13:37:13.580Z | 2026-08-13T15:20:09.307Z |
| cve-2026-66657 | 8.1 (v3.1) | WordPress Biagiotti Core plugin <= 2.1.1 - Local File … |
Mikado-Themes |
Biagiotti Core |
2026-08-13T13:37:12.967Z | 2026-08-13T15:20:44.619Z |
| cve-2026-66656 | 8.1 (v3.1) | WordPress Foton Core plugin <= 1.1.1 - Local File Incl… |
Mikado-Themes |
Foton Core |
2026-08-13T13:37:12.331Z | 2026-08-13T15:47:27.895Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2008-avi-111 | Vulnérabilités dans Mambo | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-110 | Vulnérabilité dans Cadic Intégrale (Ex-Libris) | 2008-02-28T00:00:00.000000 | 2008-02-29T00:00:00.000000 |
| certa-2008-avi-109 | Vulnérabilité de OpenBSD | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-108 | Vulnérabilités dans Wireshark | 2008-02-28T00:00:00.000000 | 2008-03-25T00:00:00.000000 |
| certa-2008-avi-107 | Vulnérabilités dans Symantec Decomposer | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-106 | Vulnérabilité dans Sun Solaris | 2008-02-28T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-105 | Vulnérabilité dans Thunderbird | 2008-02-27T00:00:00.000000 | 2008-02-27T00:00:00.000000 |
| certa-2008-avi-104 | Vulnérabilité dans Joomla! | 2008-02-25T00:00:00.000000 | 2008-02-25T00:00:00.000000 |
| certa-2008-avi-103 | Multiples vulnérabilités dans VMware ESX Server | 2008-02-22T00:00:00.000000 | 2008-02-28T00:00:00.000000 |
| certa-2008-avi-102 | Multiples vulnérabilités dans IBM AIX | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-101 | Vulnérabilités dans Netscape | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-100 | Vulnérabilités dans Symantec Veritas Storage Foundation | 2008-02-22T00:00:00.000000 | 2008-02-22T00:00:00.000000 |
| certa-2008-avi-099 | Vulnérabilités de BEA Weblogic | 2008-02-21T00:00:00.000000 | 2008-02-21T00:00:00.000000 |
| certa-2008-avi-098 | Multiples vulnérabilités du noyau Linux | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-097 | Multiples Vulnérabilités dans Opera | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-096 | Vulnérabilités dans Kerio MailServer | 2008-02-20T00:00:00.000000 | 2008-02-20T00:00:00.000000 |
| certa-2008-avi-095 | Vulnérabilité d'IBM DB2 | 2008-02-19T00:00:00.000000 | 2008-02-19T00:00:00.000000 |
| certa-2008-avi-094 | Multiples vulnérabilités dans Claroline | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-093 | Vulnérabilité dans sendfile sous FreeBSD | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-092 | Multiples vulnérabilités dans Dokeos | 2008-02-15T00:00:00.000000 | 2008-02-15T00:00:00.000000 |
| certa-2008-avi-091 | Multiples vulnérabilités dans les équipements Cisco Unified IP Phone | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-090 | Vulnérabilité dans HP Ignite-UX et DynRootDisk | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-089 | Vulnérabilité dans Cisco Unified Communications Manager | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-088 | Multiples vulnérabilités dans MySQL | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-087 | Multiples vulnérabilités dans Adobe Flash Media Server | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-086 | Multiples vulnérabilités dans Joomla! | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-085 | Vulnérabilité des produits F-Secure | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-084 | Vulnérabilité de PCRE | 2008-02-14T00:00:00.000000 | 2008-02-14T00:00:00.000000 |
| certa-2008-avi-083 | Multiples vulnérabilités dans ClamAV | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |
| certa-2008-avi-082 | Multiples vulnérabilités dans Cacti | 2008-02-13T00:00:00.000000 | 2008-02-13T00:00:00.000000 |