Find the CVE cohort

Subscriber Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.3.9 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:17.072Z. Updated 2026-08-18T14:38:06.056Z.

Unauthenticated Cross Site Scripting (XSS) in Affiliates Manager <= 2.9.53 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:16.166Z. Updated 2026-08-18T19:48:20.715Z.

Unauthenticated Arbitrary Content Deletion in Breeze <= 2.5.12 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:15.318Z. Updated 2026-08-18T14:51:00.213Z.

Unauthenticated SQL Injection in Affiliates Manager <= 2.9.53 versions.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:14.469Z. Updated 2026-08-18T15:11:36.750Z.

Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:13.661Z. Updated 2026-08-18T19:48:20.899Z.

Unauthenticated Cross Site Scripting (XSS) in WordPress Social Login and Register <= 7.8.1 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:12.783Z. Updated 2026-08-18T14:37:41.572Z.

Unauthenticated Broken Authentication in SupportCandy <= 3.5.1 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:11.942Z. Updated 2026-08-18T19:48:21.085Z.

Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:11.121Z. Updated 2026-08-18T14:54:51.577Z.

Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:10.294Z. Updated 2026-08-18T15:11:43.790Z.

Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.

Excerpt language: en.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:09.450Z. Updated 2026-08-18T19:48:21.270Z.

A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is n…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:09.095Z. Updated 2026-08-20T17:20:33.880Z.

Unauthenticated Cross Site Scripting (XSS) in WP Multilang <= 2.4.31 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:08.590Z. Updated 2026-08-18T14:37:12.251Z.

Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:07.757Z. Updated 2026-08-18T19:48:21.449Z.

Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:06.883Z. Updated 2026-08-18T21:25:52.497Z.

Unauthenticated Cross Site Scripting (XSS) in Autopay <= 5.0.0 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:05.818Z. Updated 2026-08-18T15:11:59.072Z.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM – Premium Packages wpdm-premium-packages allows DOM-Based XSS.This issue affects WPDM – Premium Packages: from n/a through 7.0.5.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:04.591Z. Updated 2026-10-14T17:16:14.522Z.

Unauthenticated SQL Injection in Sticky Chat Widget <= 1.4.2 versions.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:01.763Z. Updated 2026-08-18T19:48:21.814Z.

Unauthenticated Arbitrary File Download in Extra Product Options & Add-Ons for WooCommerce < 7.6 versions.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-18T14:00:00.719Z. Updated 2026-08-18T21:25:50.062Z.