| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-66698 | WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability | Brainstorm Force | SureDash | High | 7.1 | 2026-08-13 13:37:19 | Deep Dive |
| CVE-2026-66697 | WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin <= 2.10.0 - Cross Site Scripting (XSS) vulnerability | Colissimo | Colissimo Officiel : Méthodes de livraison pour WooCommerce | High | 7.1 | 2026-08-13 13:37:18 | Deep Dive |
| CVE-2026-66691 | WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability | scriptsbundle | Nokri | Critical | 9.8 | 2026-08-13 13:37:17 | Deep Dive |
| CVE-2026-66693 | WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability | Stylemix | Motors | Medium | 6.5 | 2026-08-13 13:37:17 | Deep Dive |
| CVE-2026-66687 | WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability | magepeopleteam | WpBookingly | Medium | 6.5 | 2026-08-13 13:37:16 | Deep Dive |
| CVE-2026-66689 | WordPress Anti Spam and list cleaner – AcyChecker plugin <= 2.0.0 - Broken Access Control vulnerability | AcyMailing Newsletter Team | Anti Spam and list cleaner – AcyChecker | Medium | 6.3 | 2026-08-13 13:37:16 | Deep Dive |
| CVE-2026-66661 | WordPress Directories Pro plugin <= 2.0.5 - Privilege Escalation vulnerability | Onokazu | Directories Pro | High | 7.7 | 2026-08-13 13:37:15 | Deep Dive |
| CVE-2026-66660 | WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Access Control vulnerability | Scott Paterson | Contact Form 7 – PayPal & Stripe Add-on | Medium | 6.5 | 2026-08-13 13:37:14 | Deep Dive |
| CVE-2026-66658 | WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability | MVPThemes | Reviewer | High | 8.5 | 2026-08-13 13:37:14 | Deep Dive |
| CVE-2026-66657 | WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability | Mikado-Themes | Biagiotti Core | High | 8.1 | 2026-08-13 13:37:13 | Deep Dive |
| CVE-2026-66655 | WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected Cross Site Scripting (XSS) vulnerability | multiparcels | MultiParcels Shipping For WooCommerce | High | 7.1 | 2026-08-13 13:37:12 | Deep Dive |
| CVE-2026-66656 | WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability | Mikado-Themes | Foton Core | High | 8.1 | 2026-08-13 13:37:12 | Deep Dive |
| CVE-2026-66654 | WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability | TangibleWP | Vehica Core | Medium | 6.0 | 2026-08-13 13:37:11 | Deep Dive |
| CVE-2026-66478 | WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability | andy_moyle | Church Admin | Critical | 9.3 | 2026-08-13 13:37:10 | Deep Dive |
| CVE-2026-66653 | WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability | Edge-Themes | Barista | High | 8.1 | 2026-08-13 13:37:10 | Deep Dive |
| CVE-2026-66472 | WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability | everestthemes | Everest Backup | Critical | 9.3 | 2026-08-13 13:37:09 | Deep Dive |
| CVE-2026-66471 | WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability | Themepoints | Accordion | Medium | 6.5 | 2026-08-13 13:37:08 | Deep Dive |
| CVE-2026-66468 | WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability | powerfulwp | Local Delivery Drivers for WooCommerce | High | 7.1 | 2026-08-13 13:37:07 | Deep Dive |
| CVE-2026-66469 | WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability | Afonso Matos | Arvow AI SEO Writer | High | 7.5 | 2026-08-13 13:37:07 | Deep Dive |
| CVE-2026-66467 | WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability | WPManageNinja | FluentCommunity | Medium | 6.5 | 2026-08-13 13:37:06 | Deep Dive |