| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-28182 | WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting (XSS) vulnerability | AcyMailing Newsletter Team | AcyMailing SMTP Newsletter | Medium | 6.5 | 2026-08-13 13:36:36 | Deep Dive |
| CVE-2026-28176 | WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability | Booking Activities Team | Booking Activities | High | 8.8 | 2026-08-13 13:36:35 | Deep Dive |
| CVE-2026-28174 | WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability | Arraytics | WP Event SOlution | Medium | 6.5 | 2026-08-13 13:36:34 | Deep Dive |
| CVE-2026-28175 | WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site Scripting (XSS) vulnerability | wp-buy | Visitors Traffic Real Time Statistics | High | 7.1 | 2026-08-13 13:36:34 | Deep Dive |
| CVE-2026-28173 | WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability | Arraytics | WP Event SOlution | High | 7.1 | 2026-08-13 13:36:33 | Deep Dive |
| CVE-2026-28170 | WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability | 1meril | Blog Floating Button | High | 7.1 | 2026-08-13 13:36:33 | Deep Dive |
| CVE-2026-28168 | WordPress CubeWP plugin <= 1.1.30 - SQL Injection vulnerability | Imran Tauqeer | CubeWP | High | 8.5 | 2026-08-13 13:36:32 | Deep Dive |
| CVE-2026-28161 | WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability | Aonetheme | Service Finder Booking | High | 8.8 | 2026-08-13 13:36:31 | Deep Dive |
| CVE-2026-28159 | WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability | Aonetheme | Service Finder Booking | Medium | 6.5 | 2026-08-13 13:36:31 | Deep Dive |
| CVE-2026-28158 | WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability | Lasso Analytics, Inc. | Do Lasso | High | 7.1 | 2026-08-13 13:36:30 | Deep Dive |
| CVE-2026-28156 | WordPress Do Lasso plugin <= 358 - SQL Injection vulnerability | Lasso Analytics, Inc. | Do Lasso | High | 8.5 | 2026-08-13 13:36:29 | Deep Dive |
| CVE-2026-28157 | WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability | Lasso Analytics, Inc. | Do Lasso | High | 7.5 | 2026-08-13 13:36:29 | Deep Dive |
| CVE-2026-28155 | WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) vulnerability | Lasso Analytics, Inc. | Do Lasso | Medium | 6.5 | 2026-08-13 13:36:28 | Deep Dive |
| CVE-2026-28149 | WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability | miniOrange | Headless Single Sign On | Critical | 9.8 | 2026-08-13 13:36:27 | Deep Dive |
| CVE-2026-28148 | WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability | miniOrange | Headless Single Sign On | Critical | 9.8 | 2026-08-13 13:36:27 | Deep Dive |
| CVE-2026-28142 | WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability | Shamalli | Web Directory Free | Critical | 9.3 | 2026-08-13 13:36:26 | Deep Dive |
| CVE-2026-28008 | WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability | miniOrange | OAuth Single Sign On – SSO (OAuth Client) | Critical | 9.8 | 2026-08-13 13:36:25 | Deep Dive |
| CVE-2026-28004 | WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vulnerability | Strategy11 Team | Business Directory | High | 7.1 | 2026-08-13 13:36:25 | Deep Dive |
| CVE-2026-28003 | WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability | yonifre | Maspik – Spam blacklist | High | 7.1 | 2026-08-13 13:36:24 | Deep Dive |
| CVE-2026-28001 | WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability | WPDirectoryKit | WP Directory Kit | Critical | 9.3 | 2026-08-13 13:36:23 | Deep Dive |