Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-73340 | 6.5 (v3.1) | WordPress Featured Image from URL plugin <= 5.3.3 - Cr… |
fifu.app |
Featured Image from URL |
2026-08-13T13:37:21.296Z | 2026-08-13T15:32:39.087Z |
| cve-2026-73188 | N/A | {'providerMetadata': {'orgId': '21595511-bba5-4825-b968-b78d1f9984a3', 'shortName': 'Patchstack', 'dateUpdated': '2026-08-14T08:44:47.413Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to\xa0CVE-2026-13610.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-13610.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.4'}} | N/A | N/A | 2026-08-13T13:37:20.662Z | 2026-08-14T08:44:47.413Z |
| cve-2026-66704 | 7.2 (v3.1) | WordPress Gutenverse Companion plugin <= 2.5.1 - Serve… |
Jegstudio |
Gutenverse Companion |
2026-08-13T13:37:19.999Z | 2026-08-13T15:47:16.363Z |
| cve-2026-66700 | 7.1 (v3.1) | WordPress Smart Online Order for Clover plugin <= 1.6.… |
ZAYTECH |
Smart Online Order for Clover |
2026-08-13T13:37:19.362Z | 2026-08-13T15:31:54.857Z |
| cve-2026-66698 | 7.1 (v3.1) | WordPress SureDash plugin <= 1.10.1 - Cross Site Scrip… |
Brainstorm Force |
SureDash |
2026-08-13T13:37:18.719Z | 2026-08-13T15:31:41.324Z |
| cve-2026-66697 | 7.1 (v3.1) | WordPress Colissimo Officiel : Méthodes de livraison p… |
Colissimo |
Colissimo Officiel : Méthodes de livraison pour WooCommerce |
2026-08-13T13:37:18.059Z | 2026-08-13T15:21:39.897Z |
| cve-2026-66693 | 6.5 (v3.1) | WordPress Motors plugin <= 1.4.113 - Broken Access Con… |
Stylemix |
Motors |
2026-08-13T13:37:17.420Z | 2026-08-13T15:47:19.753Z |
| cve-2026-66691 | 9.8 (v3.1) | WordPress Nokri theme <= 1.6.6 - Broken Access Control… |
scriptsbundle |
Nokri |
2026-08-13T13:37:16.786Z | 2026-08-13T15:21:26.541Z |
| cve-2026-66689 | 6.3 (v3.1) | WordPress Anti Spam and list cleaner – AcyChecker plug… |
AcyMailing Newsletter Team |
Anti Spam and list cleaner – AcyChecker |
2026-08-13T13:37:16.143Z | 2026-08-13T15:20:59.484Z |
| cve-2026-66687 | 6.5 (v3.1) | WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scr… |
magepeopleteam |
WpBookingly |
2026-08-13T13:37:15.506Z | 2026-08-13T15:21:13.231Z |
| cve-2026-66661 | 7.7 (v3.1) | WordPress Directories Pro plugin <= 2.0.5 - Privilege … |
Onokazu |
Directories Pro |
2026-08-13T13:37:14.866Z | 2026-08-13T15:47:23.054Z |
| cve-2026-66660 | 6.5 (v3.1) | WordPress Contact Form 7 – PayPal & Stripe Add-on plug… |
Scott Paterson |
Contact Form 7 – PayPal & Stripe Add-on |
2026-08-13T13:37:14.229Z | 2026-08-13T15:20:29.255Z |
| cve-2026-66658 | 8.5 (v3.1) | WordPress Reviewer plugin <= 3.14.2 - SQL Injection vu… |
MVPThemes |
Reviewer |
2026-08-13T13:37:13.580Z | 2026-08-13T15:20:09.307Z |
| cve-2026-66657 | 8.1 (v3.1) | WordPress Biagiotti Core plugin <= 2.1.1 - Local File … |
Mikado-Themes |
Biagiotti Core |
2026-08-13T13:37:12.967Z | 2026-08-13T15:20:44.619Z |
| cve-2026-66656 | 8.1 (v3.1) | WordPress Foton Core plugin <= 1.1.1 - Local File Incl… |
Mikado-Themes |
Foton Core |
2026-08-13T13:37:12.331Z | 2026-08-13T15:47:27.895Z |
| cve-2026-66655 | 7.1 (v3.1) | WordPress MultiParcels Shipping For WooCommerce plugin… |
multiparcels |
MultiParcels Shipping For WooCommerce |
2026-08-13T13:37:11.692Z | 2026-08-13T15:19:36.757Z |
| cve-2026-66654 | 6 (v3.1) | WordPress Vehica Core plugin <= 1.0.104 - Server Side … |
TangibleWP |
Vehica Core |
2026-08-13T13:37:11.048Z | 2026-08-13T15:19:50.154Z |
| cve-2026-66653 | 8.1 (v3.1) | WordPress Barista theme <= 2.5.1 - Local File Inclusio… |
Edge-Themes |
Barista |
2026-08-13T13:37:10.397Z | 2026-08-13T15:31:27.425Z |
| cve-2026-66478 | 9.3 (v3.1) | WordPress Church Admin plugin <= 5.1.1 - SQL Injection… |
andy_moyle |
Church Admin |
2026-08-13T13:37:09.733Z | 2026-08-13T15:47:31.186Z |
| cve-2026-66472 | 9.3 (v3.1) | WordPress Everest Backup plugin <= 2.3.12 - SQL Inject… |
everestthemes |
Everest Backup |
2026-08-13T13:37:09.069Z | 2026-08-13T15:31:12.733Z |
| cve-2026-66471 | 6.5 (v3.1) | WordPress Accordion plugin <= 3.0.6 - Cross Site Scrip… |
Themepoints |
Accordion |
2026-08-13T13:37:08.421Z | 2026-08-13T15:30:45.164Z |
| cve-2026-66469 | 7.5 (v3.1) | WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken… |
Afonso Matos |
Arvow AI SEO Writer |
2026-08-13T13:37:07.274Z | 2026-08-13T15:30:59.316Z |
| cve-2026-66468 | 7.1 (v3.1) | WordPress Local Delivery Drivers for WooCommerce plugi… |
powerfulwp |
Local Delivery Drivers for WooCommerce |
2026-08-13T13:37:06.613Z | 2026-08-13T15:47:34.247Z |
| cve-2026-66467 | 6.5 (v3.1) | WordPress FluentCommunity plugin <= 2.7.5 - Cross Site… |
WPManageNinja |
FluentCommunity |
2026-08-13T13:37:05.957Z | 2026-08-13T15:30:31.805Z |
| cve-2026-66466 | 7.5 (v3.1) | WordPress StoreGrowth: Smart Sales Booster for WooComm… |
weDevs |
StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart |
2026-08-13T13:37:05.302Z | 2026-08-13T15:30:01.799Z |
| cve-2026-66465 | 9.8 (v3.1) | WordPress Cartify theme <= 1.3.0.1 - Account Takeover … |
AgniHD |
Cartify |
2026-08-13T13:37:04.631Z | 2026-08-13T15:30:16.995Z |
| cve-2026-66464 | 6.5 (v3.1) | WordPress Internal Link Optimiser plugin <= 5.2.7 - Br… |
Toast Plugins |
Internal Link Optimiser |
2026-08-13T13:37:03.988Z | 2026-08-13T15:47:37.888Z |
| cve-2026-66463 | 7.5 (v3.1) | WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposu… |
Hassan Fakih |
iCARRY |
2026-08-13T13:37:03.342Z | 2026-08-13T15:29:32.291Z |
| cve-2026-66462 | 7.5 (v3.1) | WordPress WooCommerce Appointments plugin <= 5.3.8 - S… |
BookingWP |
WooCommerce Appointments |
2026-08-13T13:37:02.702Z | 2026-08-13T15:29:47.048Z |
| cve-2026-66461 | 7.5 (v3.1) | WordPress SMEPay: UPI Gateway for WooCommerce plugin <… |
smepay |
SMEPay: UPI Gateway for WooCommerce |
2026-08-13T13:37:02.062Z | 2026-08-13T15:29:18.027Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2007-avi-414 | Multiples vulneŕabilités dans ImageMagick | 2007-09-24T00:00:00.000000 | 2007-09-24T00:00:00.000000 |
| certa-2007-avi-413 | Vulnérabilités dans libvorbis | 2007-09-21T00:00:00.000000 | 2007-09-21T00:00:00.000000 |
| certa-2007-avi-412 | Vulnérabilité dans HP-UX | 2007-09-21T00:00:00.000000 | 2007-09-21T00:00:00.000000 |
| certa-2007-avi-411 | Multiples vulnérabilités de Tivoli | 2007-09-21T00:00:00.000000 | 2007-09-21T00:00:00.000000 |
| certa-2007-avi-410 | Vulnérabilité de KDM | 2007-09-21T00:00:00.000000 | 2007-09-21T00:00:00.000000 |
| certa-2007-avi-409 | Multiples vulnérabilités dans les produits VMware | 2007-09-21T00:00:00.000000 | 2007-11-20T00:00:00.000000 |
| certa-2007-avi-408 | Vulnérabilité de WinSCP | 2007-09-19T00:00:00.000000 | 2007-09-19T00:00:00.000000 |
| certa-2007-avi-407 | Vulnérabilité dans Firefox | 2007-09-19T00:00:00.000000 | 2007-09-19T00:00:00.000000 |
| certa-2007-avi-406 | Vulnérabilité de OmniPCX Entreprise | 2007-09-18T00:00:00.000000 | 2007-09-18T00:00:00.000000 |
| certa-2007-avi-405 | Vulnérabilités multiples d'OpenOffice | 2007-09-18T00:00:00.000000 | 2007-09-18T00:00:00.000000 |
| certa-2007-avi-404 | Vulnérabilité de Qt | 2007-09-18T00:00:00.000000 | 2007-09-18T00:00:00.000000 |
| certa-2007-avi-403 | Vulnérabilité de X.Org | 2007-09-13T00:00:00.000000 | 2007-09-13T00:00:00.000000 |
| certa-2007-avi-402 | Multiples vulnérabilités de Apache | 2007-09-13T00:00:00.000000 | 2007-11-08T00:00:00.000000 |
| certa-2007-avi-401 | Multiples vulnérabilités de Wordpress | 2007-09-13T00:00:00.000000 | 2007-09-13T00:00:00.000000 |
| certa-2007-avi-400 | Vulnérabilité dans MSN Messenger et Windows live Messenger | 2007-09-12T00:00:00.000000 | 2007-09-12T00:00:00.000000 |
| certa-2007-avi-399 | Vulnérabilité dans les services Windows pour UNIX | 2007-09-12T00:00:00.000000 | 2007-09-12T00:00:00.000000 |
| certa-2007-avi-398 | Vulnérabilité dans Visual Studio | 2007-09-12T00:00:00.000000 | 2007-09-12T00:00:00.000000 |
| certa-2007-avi-397 | Vulnérabilité dans Microsoft Agent | 2007-09-12T00:00:00.000000 | 2007-09-12T00:00:00.000000 |
| certa-2007-avi-396 | Vulnérabilités des produits Cisco Catalyst | 2007-09-11T00:00:00.000000 | 2007-09-11T00:00:00.000000 |
| certa-2007-avi-395 | Vulnérabilité de WebSphere | 2007-09-11T00:00:00.000000 | 2007-09-11T00:00:00.000000 |
| certa-2007-avi-394 | Vulnérabilité dans l'antivirus Sophos | 2007-09-11T00:00:00.000000 | 2007-09-11T00:00:00.000000 |
| certa-2007-avi-393 | Vulnérabilité dans CAS | 2007-09-07T00:00:00.000000 | 2007-09-07T00:00:00.000000 |
| certa-2007-avi-392 | Vulnérabilités dans IBM AIX | 2007-09-06T00:00:00.000000 | 2007-09-06T00:00:00.000000 |
| certa-2007-avi-391 | Vulnérabilité dans GNU Tar | 2007-09-06T00:00:00.000000 | 2009-12-04T00:00:00.000000 |
| certa-2007-avi-390 | Vulnérabilités dans Kerberos | 2007-09-06T00:00:00.000000 | 2007-09-06T00:00:00.000000 |
| certa-2007-avi-389 | Vulnérabilité de Apple AirPort Extreme Base Station | 2007-09-06T00:00:00.000000 | 2007-09-06T00:00:00.000000 |
| certa-2007-avi-388 | Multiples vulnérabilités dans PHP | 2007-09-05T00:00:00.000000 | 2007-09-05T00:00:00.000000 |
| certa-2007-avi-387 | Vulnérabilité de Policyd pour Postfix | 2007-09-03T00:00:00.000000 | 2007-09-03T00:00:00.000000 |
| certa-2007-avi-386 | Vulnérabilités dans Claroline | 2007-09-03T00:00:00.000000 | 2007-09-03T00:00:00.000000 |
| certa-2007-avi-385 | Multiples vulnérabilités de BEA Weblogic | 2007-08-30T00:00:00.000000 | 2007-08-30T00:00:00.000000 |