|
cve-2026-28186
|
8.1 (v3.1)
|
WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken A…
|
themefic
|
Travelfic Toolkit
|
2026-08-13T13:36:38.282Z |
2026-08-13T15:48:16.393Z |
|
cve-2026-28185
|
9.8 (v3.1)
|
WordPress Log in with Google plugin <= 1.4.2 - Broken …
|
rtCamp
|
Log in with Google
|
2026-08-13T13:36:37.635Z |
2026-08-13T15:24:39.735Z |
|
cve-2026-28184
|
N/A
|
{'providerMetadata': {'orgId': '21595511-bba5-4825-b968-b78d1f9984a3', 'shortName': 'Patchstack', 'dateUpdated': '2026-08-14T07:30:45.332Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.4'}}
|
N/A
|
N/A
|
2026-08-13T13:36:36.988Z |
2026-08-14T07:30:45.332Z |
|
cve-2026-28182
|
6.5 (v3.1)
|
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1…
|
AcyMailing Newsletter Team
|
AcyMailing SMTP Newsletter
|
2026-08-13T13:36:36.350Z |
2026-08-13T15:22:55.730Z |
|
cve-2026-28181
|
6.5 (v3.1)
|
WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1…
|
AcyMailing Newsletter Team
|
AcyMailing SMTP Newsletter
|
2026-08-13T13:36:35.708Z |
2026-08-13T15:48:20.320Z |
|
cve-2026-28176
|
8.8 (v3.1)
|
WordPress Booking Activities plugin <= 1.18.4 - PHP Ob…
|
Booking Activities Team
|
Booking Activities
|
2026-08-13T13:36:35.072Z |
2026-08-13T15:19:08.760Z |
|
cve-2026-28175
|
7.1 (v3.1)
|
WordPress Visitors Traffic Real Time Statistics plugin…
|
wp-buy
|
Visitors Traffic Real Time Statistics
|
2026-08-13T13:36:34.433Z |
2026-08-13T15:18:23.966Z |
|
cve-2026-28174
|
6.5 (v3.1)
|
WordPress WP Event SOlution plugin <= 4.1.18 - Sensiti…
|
Arraytics
|
WP Event SOlution
|
2026-08-13T13:36:33.789Z |
2026-08-13T15:18:37.853Z |
|
cve-2026-28173
|
7.1 (v3.1)
|
WordPress WP Event SOlution plugin <= 4.1.19 - Arbitra…
|
Arraytics
|
WP Event SOlution
|
2026-08-13T13:36:33.153Z |
2026-08-13T15:48:23.293Z |
|
cve-2026-28170
|
7.1 (v3.1)
|
WordPress Blog Floating Button plugin <= 1.4.20 - Cros…
|
1meril
|
Blog Floating Button
|
2026-08-13T13:36:32.516Z |
2026-08-13T15:18:10.484Z |
|
cve-2026-28168
|
8.5 (v3.1)
|
WordPress CubeWP plugin <= 1.1.30 - SQL Injection vuln…
|
Imran Tauqeer
|
CubeWP
|
2026-08-13T13:36:31.879Z |
2026-08-13T15:17:55.990Z |
|
cve-2026-28161
|
8.8 (v3.1)
|
WordPress Service Finder Booking plugin <= 6.2 - Privi…
|
Aonetheme
|
Service Finder Booking
|
2026-08-13T13:36:31.238Z |
2026-08-13T15:17:25.499Z |
|
cve-2026-28159
|
6.5 (v3.1)
|
WordPress Service Finder Booking plugin <= 6.2 - Broke…
|
Aonetheme
|
Service Finder Booking
|
2026-08-13T13:36:30.596Z |
2026-08-13T15:48:27.905Z |
|
cve-2026-28158
|
7.1 (v3.1)
|
WordPress Do Lasso plugin <= 358 - Cross Site Scriptin…
|
Lasso Analytics, Inc.
|
Do Lasso
|
2026-08-13T13:36:29.953Z |
2026-08-13T15:17:41.003Z |
|
cve-2026-28157
|
7.5 (v3.1)
|
WordPress Do Lasso plugin <= 358 - Path Traversal vuln…
|
Lasso Analytics, Inc.
|
Do Lasso
|
2026-08-13T13:36:29.313Z |
2026-08-13T15:23:10.611Z |
|
cve-2026-28156
|
8.5 (v3.1)
|
WordPress Do Lasso plugin <= 358 - SQL Injection vulne…
|
Lasso Analytics, Inc.
|
Do Lasso
|
2026-08-13T13:36:28.665Z |
2026-08-13T15:23:59.092Z |
|
cve-2026-28155
|
6.5 (v3.1)
|
WordPress Do Lasso plugin <= 358 - Insecure Direct Obj…
|
Lasso Analytics, Inc.
|
Do Lasso
|
2026-08-13T13:36:28.021Z |
2026-08-13T15:48:34.121Z |
|
cve-2026-28149
|
9.8 (v3.1)
|
WordPress Headless Single Sign On plugin <= 1.6 - PHP …
|
miniOrange
|
Headless Single Sign On
|
2026-08-13T13:36:27.374Z |
2026-08-13T15:23:45.729Z |
|
cve-2026-28148
|
9.8 (v3.1)
|
WordPress Headless Single Sign On plugin <= 1.6 - Bypa…
|
miniOrange
|
Headless Single Sign On
|
2026-08-13T13:36:26.722Z |
2026-08-13T15:24:12.774Z |
|
cve-2026-28142
|
9.3 (v3.1)
|
WordPress Web Directory Free plugin <= 1.7.13 - SQL In…
|
Shamalli
|
Web Directory Free
|
2026-08-13T13:36:26.081Z |
2026-08-13T15:23:29.723Z |
|
cve-2026-28008
|
9.8 (v3.1)
|
WordPress OAuth Single Sign On – SSO (OAuth Client) pl…
|
miniOrange
|
OAuth Single Sign On – SSO (OAuth Client)
|
2026-08-13T13:36:25.434Z |
2026-08-13T15:24:26.180Z |
|
cve-2026-28004
|
7.1 (v3.1)
|
WordPress Business Directory plugin <= 6.4.25 - Cross …
|
Strategy11 Team
|
Business Directory
|
2026-08-13T13:36:24.786Z |
2026-08-13T15:22:41.117Z |
|
cve-2026-28003
|
7.1 (v3.1)
|
WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cr…
|
yonifre
|
Maspik – Spam blacklist
|
2026-08-13T13:36:24.132Z |
2026-08-13T15:22:11.649Z |
|
cve-2026-28001
|
9.3 (v3.1)
|
WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injec…
|
WPDirectoryKit
|
WP Directory Kit
|
2026-08-13T13:36:22.881Z |
2026-08-13T15:48:37.247Z |
|
cve-2026-27999
|
6.5 (v3.1)
|
WordPress Tourfic plugin <= 2.23.1 - Broken Access Con…
|
themefic
|
Tourfic
|
2026-08-13T13:36:22.230Z |
2026-08-13T15:21:55.751Z |
|
cve-2026-27544
|
10 (v3.1)
|
WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code…
|
QuarkA
|
QA Analytics
|
2026-08-13T13:36:21.589Z |
2026-08-13T15:22:25.666Z |
|
cve-2026-27543
|
8.1 (v3.1)
|
WordPress MStore API plugin <= 4.20.0 - Privilege Esca…
|
FluxBuilder
|
MStore API
|
2026-08-13T13:36:20.946Z |
2026-08-13T15:16:56.080Z |
|
cve-2026-27539
|
7.1 (v3.1)
|
WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross…
|
Welcart
|
Welcart e-Commerce
|
2026-08-13T13:36:20.297Z |
2026-08-13T15:48:40.879Z |
|
cve-2026-27538
|
7.5 (v3.1)
|
WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injec…
|
WPDirectoryKit
|
WP Directory Kit
|
2026-08-13T13:36:19.648Z |
2026-08-13T15:17:11.006Z |
|
cve-2026-27537
|
6.5 (v3.1)
|
WordPress Popup by Supsystic plugin <= 1.11.2 - Cross …
|
supsystic
|
Popup by Supsystic
|
2026-08-13T13:36:19.014Z |
2026-08-13T15:14:28.269Z |