Explore CVE records

HighPublished 20 Aug 2026, 19:32 WIB

CVE-2026-74011

WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9.

Excerpt language: en.

CVSS7.6v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

MedPublished 20 Aug 2026, 19:18 WIB

CVE-2026-21784

HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management (IEM) is affected by missing or insecure Cross-Origin Security headers. This issue makes the application's environment and resources susceptible to unauthorized external interaction and potential exploitation.

Excerpt language: en.

MedPublished 20 Aug 2026, 19:16 WIB

CVE-2025-62299

HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management (IEM) is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges.

Excerpt language: en.

CVSS6.6v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 23:06 WIB

Official record

MedPublished 20 Aug 2026, 19:15 WIB

CVE-2026-76987

liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption

A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory corruption. It is poss…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 01:02 WIB

Official record

MedPublished 20 Aug 2026, 19:14 WIB

CVE-2025-62300

HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management (IEM) is affected by a race condition. A "timing window" can occur where an attacker can modify the resource causing unpredictable behavior.

Excerpt language: en.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 23:06 WIB

Official record

LowPublished 20 Aug 2026, 19:12 WIB

CVE-2026-7485

Frozen BI aggregations leak host and service names to unauthorized users

Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see.

Excerpt language: en.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 21:16 WIB

Official record

MedPublished 20 Aug 2026, 19:11 WIB

CVE-2025-62306

HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response.

Excerpt language: en.

CVSS5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:26 WIB

Official record

MedPublished 20 Aug 2026, 19:07 WIB

CVE-2025-62307

HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management (IEM) is affected by insufficient logging. Insufficient logging weakens accountability, obscures attack detection, and enables privilege probing.

Excerpt language: en.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:46 WIB

Official record

HighPublished 20 Aug 2026, 19:07 WIB

CVE-2026-74020

WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Koji <= 2.2.1 versions.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:18 WIB

Official record

HighPublished 20 Aug 2026, 19:07 WIB

CVE-2026-74019

WordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in EPROLO Dropshipping <= 2.4.2 versions.

Excerpt language: en.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated24 Aug 2026, 20:01 WIB

Official record

CritPublished 20 Aug 2026, 19:07 WIB

CVE-2026-74018

WordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Warehouse Cargo <= 2.6.9 versions.

Excerpt language: en.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 21:35 WIB

Official record

CritPublished 20 Aug 2026, 19:07 WIB

CVE-2026-74016

WordPress Smart Cleaning theme <= 4.8.6 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Smart Cleaning <= 4.8.6 versions.

Excerpt language: en.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 01:43 WIB

Official record

CritPublished 20 Aug 2026, 19:07 WIB

CVE-2026-74014

WordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in IT Residence <= 3.2.1 versions.

Excerpt language: en.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

HighPublished 20 Aug 2026, 19:07 WIB

CVE-2026-74013

WordPress eShipper Commerce plugin <= 2.16.13 - SQL Injection vulnerability

Subscriber SQL Injection in eShipper Commerce <= 2.16.13 versions.

Excerpt language: en.

CVSS8.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:18 WIB

Official record

CritPublished 20 Aug 2026, 19:07 WIB

CVE-2026-74001

WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in User Registration & Membership Pro <= 5.4.5 versions.

Excerpt language: en.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

HighPublished 20 Aug 2026, 19:07 WIB

CVE-2026-73998

WordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability

Subscriber SQL Injection in WP w3all phpBB <= 3.0.5 versions.

Excerpt language: en.

CVSS8.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 21:35 WIB

Official record

CritPublished 20 Aug 2026, 19:07 WIB

CVE-2026-73993

WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in FundEngine <= 1.7.9 versions.

Excerpt language: en.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

CritPublished 20 Aug 2026, 19:07 WIB

CVE-2026-73992

WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability

Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.

Excerpt language: en.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

MedPublished 20 Aug 2026, 19:07 WIB

CVE-2026-73402

WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.

Excerpt language: en.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:18 WIB

Official record

CritPublished 20 Aug 2026, 19:07 WIB

CVE-2026-68566

WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability

Unauthenticated SQL Injection in BookingPress Appointment Booking Pro <= 6.0.2 versions.

Excerpt language: en.

CVSS9.3v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 23:27 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage