| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-71428 | unstructured: Server-Side Request Forgery in the URL-based partitioning | Unstructured-IO | unstructured | Critical | 9.3 | 2026-08-20 16:43:01 | Deep Dive |
| CVE-2026-55642 🧪 | dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured) | t8y2 | dbx | Critical | 9.8 | 2026-08-20 16:38:30 | Deep Dive |
| CVE-2026-16926 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.1 | 2026-08-20 14:38:05 | Deep Dive |
| CVE-2026-15706 | Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS | Baylan Measuring Instruments Industry and Trade Inc. | Baylan Smart Meter Management Application (BMS) | Critical | 9.8 | 2026-08-20 13:27:51 | Deep Dive |
| CVE-2026-28164 | WordPress Easy Elementor Addons plugin <= 2.3.7 - Cross Site Request Forgery (CSRF) vulnerability | HashThemes | Easy Elementor Addons | Critical | 9.6 | 2026-08-20 12:38:07 | Deep Dive |
| CVE-2026-74018 | WordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability | themagnifico52 | Warehouse Cargo | Critical | 9.9 | 2026-08-20 12:07:26 | Deep Dive |
| CVE-2026-74016 | WordPress Smart Cleaning theme <= 4.8.6 - Arbitrary File Upload vulnerability | themagnifico52 | Smart Cleaning | Critical | 9.9 | 2026-08-20 12:07:25 | Deep Dive |
| CVE-2026-74014 | WordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability | indithemes | IT Residence | Critical | 9.9 | 2026-08-20 12:07:24 | Deep Dive |
| CVE-2026-74001 | WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability | WPEverest | User Registration & Membership Pro | Critical | 9.8 | 2026-08-20 12:07:23 | Deep Dive |
| CVE-2026-73992 | WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability | Jonathan Daggerhart | Query Wrangler | Critical | 9.9 | 2026-08-20 12:07:21 | Deep Dive |
| CVE-2026-73993 | WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability | Roxnor | FundEngine | Critical | 9.8 | 2026-08-20 12:07:21 | Deep Dive |
| CVE-2026-68566 | WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability | Repute Infosystems | BookingPress Appointment Booking Pro | Critical | 9.3 | 2026-08-20 12:07:19 | Deep Dive |
| CVE-2026-66682 | WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability | Tyche Softwares. | Abandoned Cart Pro for WooCommerce | Critical | 9.8 | 2026-08-20 12:07:18 | Deep Dive |
| CVE-2026-66680 | WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability | plainware | Locatoraid Store Locator | Critical | 9.3 | 2026-08-20 12:07:17 | Deep Dive |
| CVE-2026-66672 | WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability | Monkeysan | Flatastic | Critical | 9.8 | 2026-08-20 12:07:15 | Deep Dive |
| CVE-2026-66649 | WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability | e-plugins | Directory Pro | Critical | 9.3 | 2026-08-20 12:07:14 | Deep Dive |
| CVE-2026-66609 | WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability | CodexThemes | TheGem (Elementor) | Critical | 9.3 | 2026-08-20 12:07:09 | Deep Dive |
| CVE-2026-66600 | WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability | David Lingren | Media LIbrary Assistant | Critical | 9.1 | 2026-08-20 12:07:05 | Deep Dive |
| CVE-2026-66592 | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability | rtCamp | rtMedia for WordPress, BuddyPress and bbPress | Critical | 9.3 | 2026-08-20 12:07:01 | Deep Dive |
| CVE-2026-66593 | WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability | CleanTalk Inc | Security & Malware scan by CleanTalk | Critical | 9.3 | 2026-08-20 12:07:01 | Deep Dive |