Search
616 CVEs · published 2026-08-13 to 2026-08-13
CVEs (616, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 451–475 of 616 (capped at 500)
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2026-28184 | NONE | — | 2026-08-13 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-28182 | MEDIUM | 6.5 | 2026-08-13 | Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |
| CVE-2026-28181 | MEDIUM | 6.5 | 2026-08-13 | Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions. | |
| CVE-2026-28176 | HIGH | 8.8 | 2026-08-13 | Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions. | |
| CVE-2026-28175 | HIGH | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions. | |
| CVE-2026-28174 | MEDIUM | 6.5 | 2026-08-13 | Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions. | |
| CVE-2026-28173 | HIGH | 7.1 | 2026-08-13 | Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions. | |
| CVE-2026-28170 | HIGH | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions. | |
| CVE-2026-28168 | HIGH | 8.5 | 2026-08-13 | Subscriber SQL Injection in CubeWP <= 1.1.30 versions. | |
| CVE-2026-28161 | HIGH | 8.8 | 2026-08-13 | Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions. | |
| CVE-2026-28159 | MEDIUM | 6.5 | 2026-08-13 | Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions. | |
| CVE-2026-28158 | HIGH | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions. | |
| CVE-2026-28157 | HIGH | 7.5 | 2026-08-13 | Subscriber Path Traversal in Do Lasso <= 358 versions. | |
| CVE-2026-28156 | HIGH | 8.5 | 2026-08-13 | Subscriber SQL Injection in Do Lasso <= 358 versions. | |
| CVE-2026-28155 | MEDIUM | 6.5 | 2026-08-13 | Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions. | |
| CVE-2026-28149 | CRITICAL | 9.8 | 2026-08-13 | Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions. | |
| CVE-2026-28148 | CRITICAL | 9.8 | 2026-08-13 | Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions. | |
| CVE-2026-28142 | CRITICAL | 9.3 | 2026-08-13 | Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions. | |
| CVE-2026-28008 | CRITICAL | 9.8 | 2026-08-13 | Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions. | |
| CVE-2026-28004 | HIGH | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions. | |
| CVE-2026-28003 | HIGH | 7.1 | 2026-08-13 | Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions. | |
| CVE-2026-28002 | HIGH | 8.5 | 2026-08-13 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Boo… | |
| CVE-2026-28001 | CRITICAL | 9.3 | 2026-08-13 | Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions. | |
| CVE-2026-27999 | MEDIUM | 6.5 | 2026-08-13 | Subscriber Broken Access Control in Tourfic <= 2.23.1 versions. | |
| CVE-2026-27544 | CRITICAL | 10.0 | 2026-08-13 | Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions. |