Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-61966 9.3 (v3.1) WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection … denishua
WPJAM Basic
2026-08-13T13:36:42.774Z 2026-08-13T15:26:17.531Z
cve-2026-61965 7.1 (v3.1) WordPress GeekyBot plugin <= 1.2.6 - Cross Site Script… ahmadgb
GeekyBot
2026-08-13T13:36:42.137Z 2026-08-13T15:25:50.432Z
cve-2026-61962 10 (v3.1) WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary … Hakan Ozevin
WP BASE Booking
2026-08-13T13:36:41.487Z 2026-08-13T15:26:03.760Z
cve-2026-61960 7.1 (v3.1) WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross … Themeisle
WP Full Stripe Free
2026-08-13T13:36:40.839Z 2026-08-13T15:48:12.794Z
cve-2026-28189 7.4 (v3.1) WordPress Participants Database plugin <= 2.7.8.4 - Ar… Roland Barker
Participants Database
2026-08-13T13:36:40.207Z 2026-08-13T15:25:23.043Z
cve-2026-28188 7.3 (v3.1) WordPress Hydra Booking plugin <= 1.2.2 - Broken Acces… themefic
Hydra Booking
2026-08-13T13:36:39.551Z 2026-08-13T15:25:36.506Z
cve-2026-28187 7.1 (v3.1) WordPress Knowledge Base for Documentation, FAQs with … echoplugins
Knowledge Base for Documentation, FAQs with AI Assistance
2026-08-13T13:36:38.921Z 2026-08-13T15:25:09.378Z
cve-2026-28186 8.1 (v3.1) WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken A… themefic
Travelfic Toolkit
2026-08-13T13:36:38.282Z 2026-08-13T15:48:16.393Z
cve-2026-28185 9.8 (v3.1) WordPress Log in with Google plugin <= 1.4.2 - Broken … rtCamp
Log in with Google
2026-08-13T13:36:37.635Z 2026-08-13T15:24:39.735Z
cve-2026-28184 N/A {'providerMetadata': {'orgId': '21595511-bba5-4825-b968-b78d1f9984a3', 'shortName': 'Patchstack', 'dateUpdated': '2026-08-14T07:30:45.332Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.4'}} N/A N/A 2026-08-13T13:36:36.988Z 2026-08-14T07:30:45.332Z
cve-2026-28182 6.5 (v3.1) WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1… AcyMailing Newsletter Team
AcyMailing SMTP Newsletter
2026-08-13T13:36:36.350Z 2026-08-13T15:22:55.730Z
cve-2026-28181 6.5 (v3.1) WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1… AcyMailing Newsletter Team
AcyMailing SMTP Newsletter
2026-08-13T13:36:35.708Z 2026-08-13T15:48:20.320Z
cve-2026-28176 8.8 (v3.1) WordPress Booking Activities plugin <= 1.18.4 - PHP Ob… Booking Activities Team
Booking Activities
2026-08-13T13:36:35.072Z 2026-08-13T15:19:08.760Z
cve-2026-28175 7.1 (v3.1) WordPress Visitors Traffic Real Time Statistics plugin… wp-buy
Visitors Traffic Real Time Statistics
2026-08-13T13:36:34.433Z 2026-08-13T15:18:23.966Z
cve-2026-28174 6.5 (v3.1) WordPress WP Event SOlution plugin <= 4.1.18 - Sensiti… Arraytics
WP Event SOlution
2026-08-13T13:36:33.789Z 2026-08-13T15:18:37.853Z
cve-2026-28173 7.1 (v3.1) WordPress WP Event SOlution plugin <= 4.1.19 - Arbitra… Arraytics
WP Event SOlution
2026-08-13T13:36:33.153Z 2026-08-13T15:48:23.293Z
cve-2026-28170 7.1 (v3.1) WordPress Blog Floating Button plugin <= 1.4.20 - Cros… 1meril
Blog Floating Button
2026-08-13T13:36:32.516Z 2026-08-13T15:18:10.484Z
cve-2026-28168 8.5 (v3.1) WordPress CubeWP plugin <= 1.1.30 - SQL Injection vuln… Imran Tauqeer
CubeWP
2026-08-13T13:36:31.879Z 2026-08-13T15:17:55.990Z
cve-2026-28161 8.8 (v3.1) WordPress Service Finder Booking plugin <= 6.2 - Privi… Aonetheme
Service Finder Booking
2026-08-13T13:36:31.238Z 2026-08-13T15:17:25.499Z
cve-2026-28159 6.5 (v3.1) WordPress Service Finder Booking plugin <= 6.2 - Broke… Aonetheme
Service Finder Booking
2026-08-13T13:36:30.596Z 2026-08-13T15:48:27.905Z
cve-2026-28158 7.1 (v3.1) WordPress Do Lasso plugin <= 358 - Cross Site Scriptin… Lasso Analytics, Inc.
Do Lasso
2026-08-13T13:36:29.953Z 2026-08-13T15:17:41.003Z
cve-2026-28157 7.5 (v3.1) WordPress Do Lasso plugin <= 358 - Path Traversal vuln… Lasso Analytics, Inc.
Do Lasso
2026-08-13T13:36:29.313Z 2026-08-13T15:23:10.611Z
cve-2026-28156 8.5 (v3.1) WordPress Do Lasso plugin <= 358 - SQL Injection vulne… Lasso Analytics, Inc.
Do Lasso
2026-08-13T13:36:28.665Z 2026-08-13T15:23:59.092Z
cve-2026-28155 6.5 (v3.1) WordPress Do Lasso plugin <= 358 - Insecure Direct Obj… Lasso Analytics, Inc.
Do Lasso
2026-08-13T13:36:28.021Z 2026-08-13T15:48:34.121Z
cve-2026-28149 9.8 (v3.1) WordPress Headless Single Sign On plugin <= 1.6 - PHP … miniOrange
Headless Single Sign On
2026-08-13T13:36:27.374Z 2026-08-13T15:23:45.729Z
cve-2026-28148 9.8 (v3.1) WordPress Headless Single Sign On plugin <= 1.6 - Bypa… miniOrange
Headless Single Sign On
2026-08-13T13:36:26.722Z 2026-08-13T15:24:12.774Z
cve-2026-28142 9.3 (v3.1) WordPress Web Directory Free plugin <= 1.7.13 - SQL In… Shamalli
Web Directory Free
2026-08-13T13:36:26.081Z 2026-08-13T15:23:29.723Z
cve-2026-28008 9.8 (v3.1) WordPress OAuth Single Sign On – SSO (OAuth Client) pl… miniOrange
OAuth Single Sign On – SSO (OAuth Client)
2026-08-13T13:36:25.434Z 2026-08-13T15:24:26.180Z
cve-2026-28004 7.1 (v3.1) WordPress Business Directory plugin <= 6.4.25 - Cross … Strategy11 Team
Business Directory
2026-08-13T13:36:24.786Z 2026-08-13T15:22:41.117Z
cve-2026-28003 7.1 (v3.1) WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cr… yonifre
Maspik – Spam blacklist
2026-08-13T13:36:24.132Z 2026-08-13T15:22:11.649Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description