| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-66458 | WordPress RealPress plugin <= 1.1.2 - SQL Injection vulnerability | ThimPress | RealPress | Critical | 9.3 | 2026-08-13 13:37:00 | Deep Dive |
| CVE-2026-66453 | WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability | Dimitri Grassi | Salon booking system | Critical | 9.8 | 2026-08-13 13:36:58 | Deep Dive |
| CVE-2026-66446 | WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability | If-So Dynamic Content | If-So Dynamic Content Personalization | Critical | 9.3 | 2026-08-13 13:36:56 | Deep Dive |
| CVE-2026-66436 | WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability | RealMag777 | Active Products Tables for WooCommerce | Critical | 9.3 | 2026-08-13 13:36:53 | Deep Dive |
| CVE-2026-66424 | WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability | Cozy Vision Technologies Pvt. Ltd. | SMS Alert Order Notifications | Critical | 9.8 | 2026-08-13 13:36:49 | Deep Dive |
| CVE-2026-61969 | WordPress Listdom plugin <= 5.6.0 - SQL Injection vulnerability | Webilia Inc. | Listdom | Critical | 9.3 | 2026-08-13 13:36:44 | Deep Dive |
| CVE-2026-61967 | WordPress miniorange otp verification plugin <= 5.5.1 - Privilege Escalation vulnerability | miniOrange | miniorange otp verification | Critical | 9.8 | 2026-08-13 13:36:43 | Deep Dive |
| CVE-2026-61966 | WordPress WPJAM Basic plugin <= 7.0.1 - SQL Injection vulnerability | denishua | WPJAM Basic | Critical | 9.3 | 2026-08-13 13:36:43 | Deep Dive |
| CVE-2026-61962 | WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability | Hakan Ozevin | WP BASE Booking | Critical | 10.0 | 2026-08-13 13:36:41 | Deep Dive |
| CVE-2026-28185 | WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability | rtCamp | Log in with Google | Critical | 9.8 | 2026-08-13 13:36:38 | Deep Dive |
| CVE-2026-28149 | WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability | miniOrange | Headless Single Sign On | Critical | 9.8 | 2026-08-13 13:36:27 | Deep Dive |
| CVE-2026-28148 | WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability | miniOrange | Headless Single Sign On | Critical | 9.8 | 2026-08-13 13:36:27 | Deep Dive |
| CVE-2026-28142 | WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability | Shamalli | Web Directory Free | Critical | 9.3 | 2026-08-13 13:36:26 | Deep Dive |
| CVE-2026-28008 | WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability | miniOrange | OAuth Single Sign On – SSO (OAuth Client) | Critical | 9.8 | 2026-08-13 13:36:25 | Deep Dive |
| CVE-2026-28001 | WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability | WPDirectoryKit | WP Directory Kit | Critical | 9.3 | 2026-08-13 13:36:23 | Deep Dive |
| CVE-2026-27544 | WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability | QuarkA | QA Analytics | Critical | 10.0 | 2026-08-13 13:36:22 | Deep Dive |
| CVE-2026-49827 🧪 | WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434) | SMEWebify | WebErpMesv2 | Critical | 9.8 | 2026-08-13 12:51:55 | Deep Dive |
| CVE-2026-73602 🧪 | Flowise before 3.1.3 Sandbox Escape to RCE | FlowiseAI | Flowise | Critical | 9.0 | 2026-08-13 11:28:09 | Deep Dive |
| CVE-2026-73601 🧪 | Flowise before 3.1.3 Remote Code Execution via Custom MCP | FlowiseAI | Flowise | Critical | 9.0 | 2026-08-13 11:28:08 | Deep Dive |
| CVE-2026-73487 🧪 | Flowise before 3.1.3 Prompt Injection RCE via CSV Agent | FlowiseAI | Flowise | Critical | 9.0 | 2026-08-13 11:28:07 | Deep Dive |